#advisory

共收录 23717 条相关情报。

← 返回所有主题
安全公告2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...

CVE-2026-20278

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...

CVE-2026-20277

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow...

CVE-2026-20212

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow...

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read per

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job...

CVE-2026-84676

Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the J

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names,...

CVE-2026-84677

Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and versio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin...

CVE-2026-84673

Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configura

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker...

CVE-2026-84838

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary com

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants...

CVE-2026-84672

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions us

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing...

CVE-2026-84837

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers...

CVE-2026-84675

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build en

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that...

CVE-2026-84670

Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with...

CVE-2026-84669

A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity...

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file throug

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration...

CVE-2026-84667

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data bi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin...

CVE-2026-84663

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and ear

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection...

CVE-2026-84664

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the...

CVE-2026-84666

Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history record

历史摘要 · 未重新核验 · GitHub Advisory