A user account with permission to deploy artifacts to a hosted Maven repository could upload a...
CVE-2026-77121
A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an ov
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption...
CVE-2026-20354
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption...
CVE-2026-20355
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow...
CVE-2026-84674
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read per
Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job...
CVE-2026-84676
Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the J
Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names,...
CVE-2026-84677
Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and versio
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin...
CVE-2026-84663
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and ear
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection...
CVE-2026-84664
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler d
Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL...
CVE-2026-84662
Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and...
CVE-2026-84661
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream bui
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor`...
CVE-2026-84658
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a construc
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission...
CVE-2026-84659
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that co
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the...
CVE-2026-84657
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission w
A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers...
CVE-2026-84656
A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permiss
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and...
CVE-2026-84660
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream bui
In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins...
CVE-2026-84654
In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for...
CVE-2026-84651
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration d
Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing...
CVE-2026-84655
Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field...
CVE-2026-84646
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deseriali
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation...
CVE-2026-12704
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo fi