Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2022-34813 | XPath Configuration Viewer Plugin up to 1.1.1 on Jenkins XPath Expression authorization


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in XPath Configuration Viewer Plugin up to 1.1.1. It has been rated as critical. This issue affects some unknown processing of the component XPath Expression Handler. The manipulation leads to missing authorization. The identification of this vulnerability is CVE-2022-34813. The attack can only be done within the local network. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2024-38374 | CycloneDX cyclonedx-core-java up to 9.0.3 XPath Expression xml external entity reference (GHSA-683x-4444-jxh8)


📈 34.33 Punkte
🕵️ Sicherheitslücken

🕵️ Dependency Graph Viewer Plugin up to 0.13 on Jenkins Job Configuration Stored cross site scripting


📈 33.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28668 | Role-based Authorization Strategy Plugin up to 587.v2872c41fa_e51 on Jenkins improper authorization


📈 32.09 Punkte
🕵️ Sicherheitslücken

🕵️ Azure Key Vault Plugin up to 2.0 on Jenkins Jenkins Credentials Overall/Read authorization


📈 31.61 Punkte
🕵️ Sicherheitslücken

🕵️ Configuration as Code Plugin up to 1.24 on Jenkins Configuration Import Environment Variable information disclosure


📈 31.59 Punkte
🕵️ Sicherheitslücken

🕵️ Jenkins AWS Global Configuration Plugin up to 1.5 authorization


📈 31.26 Punkte
🕵️ Sicherheitslücken

🕵️ Matrix Authorization Strategy Plugin up to 2.6.5 on Jenkins authorization


📈 30.94 Punkte
🕵️ Sicherheitslücken

🕵️ Role-based Authorization Strategy Plugin up to 3.1 on Jenkins Item/Read authorization


📈 30.94 Punkte
🕵️ Sicherheitslücken

🕵️ jenkins-cloudformation-plugin Plugin on Jenkins config.xml information disclosure


📈 28.06 Punkte
🕵️ Sicherheitslücken

🕵️ Mail Commander Plugin for Jenkins-ci Plugin up to 1.0.0 on Jenkins credentials storage


📈 28.06 Punkte
🕵️ Sicherheitslücken

🕵️ youtrack-plugin Plugin up to 0.7.1 on Jenkins Global Configuration Credentials information disclosure


📈 27.72 Punkte
🕵️ Sicherheitslücken

🕵️ Script Security Plugin up to 1.64 on Jenkins Sandbox Expression privilege escalation


📈 27.4 Punkte
🕵️ Sicherheitslücken

🕵️ Audit Trail Plugin up to 3.6 on Jenkins Regular Expression unknown vulnerability


📈 27.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-37382 | Ab Initio Metadata Hub and Authorization Gateway up to 4.3.1.0 Server Configuration improper authorization


📈 26.83 Punkte
🕵️ Sicherheitslücken

📰 SPRITE (Spatial Propagation and Reinforcement of Imputed Transcript Expression): Enhancing Spatial Gene Expression Predictions and Downstream Analyses Through Meta-Algorithmic Integration


📈 26.74 Punkte
🔧 AI Nachrichten

🕵️ CVE-2024-1637 | 360 Javascript Viewer Plugin up to 1.7.12 on WordPress Settings Update authorization (ID 3047449)


📈 25.12 Punkte
🕵️ Sicherheitslücken

🕵️ Jenkins Dependency Graph Viewer Plugin bis 0.12 API Endpoint erweiterte Rechte


📈 24.64 Punkte
🕵️ Sicherheitslücken

🕵️ Dependency Graph Viewer Plugin up to 0.12 on Jenkins API Endpoint privilege escalation


📈 24.64 Punkte
🕵️ Sicherheitslücken

🕵️ Configuration as Code Plugin up to 1.26 on Jenkins Incomplete Fix CVE-2019-10343 Log information disclosure


📈 23.96 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-24440 | JIRA Pipeline Steps Plugin up to 2.0.165.v8846cf59f3db on Jenkins Configuration Form cleartext transmission


📈 23.96 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28677 | Convert To Pipeline Plugin up to 1.0 on Jenkins Freestyle Project Configuration code injection


📈 23.96 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50773 | Dingding JSON Pusher Plugin up to 2.0 on Jenkins Job Configuration Form information disclosure


📈 23.96 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50777 | PaaSLane Estimate Plugin up to 1.0.4 on Jenkins Job Configuration Form information disclosure


📈 23.96 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-16572 | Weibo Plugin up to 1.0.1 on Jenkins Global Configuration Credentials credentials storage


📈 23.96 Punkte
🕵️ Sicherheitslücken

🕵️ Kubernetes Plugin up to 1.27.3 on Jenkins authorization [CVE-2020-2309]


📈 23.63 Punkte
🕵️ Sicherheitslücken

🕵️ Ansible Plugin up to 1.0 on Jenkins authorization [CVE-2020-2310]


📈 23.63 Punkte
🕵️ Sicherheitslücken

🕵️ Chaos Monkey Plugin up to 0.4 on Jenkins authorization [CVE-2020-2323]


📈 23.63 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-5654 | CF7 Google Sheets Connector Plugin up to 5.0.9 on WordPress Configuration authorization


📈 23.29 Punkte
🕵️ Sicherheitslücken

🕵️ jenkins-reviewbot Plugin on Jenkins Permission Check ReviewboardDescriptor#doTestConnection privilege escalation


📈 23.16 Punkte
🕵️ Sicherheitslücken

🕵️ jenkins-reviewbot Plugin on Jenkins ReviewboardDescriptor#doTestConnection cross site request forgery


📈 23.16 Punkte
🕵️ Sicherheitslücken

🕵️ jenkins-email-ext up to 2.57.0 on Jenkins Email Extension Plugin privilege escalation


📈 23.16 Punkte
🕵️ Sicherheitslücken

🕵️ ElasticBox Jenkins Kubernetes CI-CD Plugin up to 1.3 on Jenkins YAML Parser deserialization


📈 23.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-24850 | Mark Stockton Quicksand Post Filter jQuery Plugin up to 3.1.1 on WordPress Authorization authorization


📈 22.96 Punkte
🕵️ Sicherheitslücken

🕵️ Jenkins SSH Plugin Configuration File Password schwache Verschlüsselung


📈 22.81 Punkte
🕵️ Sicherheitslücken

🕵️ Jenkins Configuration as Code Plugin bis 0.7-alpha ConfigurationAsCode.java Information Disclosure


📈 22.81 Punkte
🕵️ Sicherheitslücken

matomo
•