Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-1566

Malicious code in bioql PyPI...

7.1CVSS6.9AI score0.00202EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 6:19 p.m.4 views

CVE-2021-21656

Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS6.7AI score0.00202EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/11/08 12:0 a.m.41 views

Jenkins Enterprise and Operations Center < 2.249.31.0.4 / 2.277.4.3 Multiple Vulnerabilities (CloudBees Security Advisory 2021-05-11)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.249.x prior to 2.249.31.0.4, or 2.x prior to 2.277.4.3. It is, therefore, affected by multiple vulnerabilities, including the following: - A cross-site request forgery CSRF vulnerability in Jenkin...

7.1CVSS5.8AI score0.0031EPSS
Exploits0References10
CNVD
CNVD
added 2021/05/12 12:0 a.m.6 views

CloudBees Jenkins Xcode Integration Plugin XML External Entity Injection Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . CloudBees Jenkins Xcode...

7.1CVSS7.2AI score0.00202EPSS
Exploits0References1
Prion
Prion
added 2021/05/11 3:15 p.m.9 views

Xxe

Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

5.5CVSS6.8AI score0.00202EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/05/11 2:15 p.m.65 views

CVE-2021-21656

Jenkins Xcode integration Plugin (CloudBees Jenkins Xcode integration) 2.0.14 and earlier is affected by an XML External Entity (XXE) vulnerability. The root cause is that the plugin’s XML parser is not configured to prevent XXE attacks, allowing crafted XML input to be processed in ways that cou...

7.1CVSS6.8AI score0.00202EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.2 views

PT-2021-14699 · Jenkins · Jenkins Xcode Integration Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Xcode integration Plugin versions 2.0.14 and earlier Description: The issue is related to the configuration of the XML parser, which does not prevent XML external entity XXE attacks. Recommendations: For Jenkins Xcode integration Plug...

7.1CVSS6.7AI score0.00202EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.2 views

Jenkins 代码问题漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . CloudBees Jenkins Xcode...

7.1CVSS6AI score0.00202EPSS
Exploits0References4
Rows per page
Query Builder