rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-10409 
A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates.
Affected products: vendor: Jenkins project
product: Jenkins Project Inheritance Plugin
Published: 2019-09-25T15:05:32.000Z
CVE-2019-10410 
Jenkins Log Parser Plugin 2.0 and earlier did not escape an error message, resulting in a cross-site scripting vulnerability exploitable by users able to define log parsing rules.
Affected products: vendor: Jenkins project
product: Jenkins Log Parser Plugin
Published: 2019-09-25T15:05:32.000Z
CVE-2019-10411 
Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Inedo BuildMaster Plugin
Published: 2019-09-25T15:05:32.000Z
CVE-2019-10412 
Jenkins Inedo ProGet Plugin 1.2 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Inedo ProGet Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10413 
Jenkins Data Theorem: CI/CD Plugin 1.3 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Data Theorem: CI/CD Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10414 
Jenkins Git Changelog Plugin 2.17 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Git Changelog Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10415 
Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Violation Comments to GitLab Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10416 
Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Violation Comments to GitLab Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10417 
Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.
Affected products: vendor: Jenkins project
product: Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10418 
Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.
Affected products: vendor: Jenkins project
product: Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10419 
Jenkins vFabric Application Director Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins vFabric Application Director Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10420 
Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Assembla Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10421 
Jenkins Azure Event Grid Build Notifier Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Azure Event Grid Build Notifier Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10422 
Jenkins Call Remote Job Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Call Remote Job Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10423 
Jenkins CodeScan Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins CodeScan Plugin
Published: 2019-09-25T15:05:33.000Z
CVE-2019-10424 
Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins elOyente Plugin
Published: 2019-09-25T15:05:34.000Z
CVE-2019-10425 
Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Google Calendar Plugin
Published: 2019-09-25T15:05:34.000Z
CVE-2019-10426 
Jenkins Gem Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Gem Publisher Plugin
Published: 2019-09-25T15:05:34.000Z
CVE-2019-10427 
Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Aqua MicroScanner Plugin
Published: 2019-09-25T15:05:34.000Z
CVE-2019-10428 
Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins Aqua Security Scanner Plugin
Published: 2019-09-25T15:05:34.000Z
CVE-2019-10429 
Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins GitLab Logo Plugin
Published: 2019-09-25T15:05:34.000Z
CVE-2019-10430 
Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins NeuVector Vulnerability Scanner Plugin
Published: 2019-09-25T15:05:34.000Z
CVE-2019-10431 
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
Affected products: vendor: Jenkins project
product: Jenkins Script Security Plugin
Published: 2019-10-01T13:45:19.000Z
CVE-2019-10432 
Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those.
Affected products: vendor: Jenkins project
product: Jenkins HTML Publisher Plugin
Published: 2019-10-01T13:45:19.000Z
CVE-2019-10433 
Jenkins Dingding[钉钉] Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Dingding[钉钉] Plugin
Published: 2019-10-01T13:45:20.000Z
CVE-2019-10434 
Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins LDAP Email Plugin
Published: 2019-10-01T13:45:20.000Z
CVE-2019-10435 
Jenkins SourceGear Vault Plugin transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.
Affected products: vendor: Jenkins project
product: Jenkins SourceGear Vault Plugin
Published: 2019-10-01T13:45:20.000Z
CVE-2019-10436 
An arbitrary file read vulnerability in Jenkins Google OAuth Credentials Plugin 0.9 and earlier allowed attackers able to configure jobs and credentials in Jenkins to obtain the contents of any file on the Jenkins master.
Affected products: vendor: Jenkins project
product: Jenkins Google OAuth Credentials Plugin
Published: 2019-10-16T13:00:44.000Z
CVE-2019-10437 
A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins CRX Content Package Deployer Plugin
Published: 2019-10-16T13:00:44.000Z
CVE-2019-10438 
A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins CRX Content Package Deployer Plugin
Published: 2019-10-16T13:00:45.000Z
CVE-2019-10439 
A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins CRX Content Package Deployer Plugin
Published: 2019-10-16T13:00:45.000Z
CVE-2019-10440 
Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins NeoLoad Plugin
Published: 2019-10-16T13:00:46.000Z
CVE-2019-10441 
A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins iceScrum Plugin
Published: 2019-10-16T13:00:46.000Z
CVE-2019-10442 
A missing permission check in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins iceScrum Plugin
Published: 2019-10-16T13:00:47.000Z
CVE-2019-10443 
Jenkins iceScrum Plugin 1.1.4 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins iceScrum Plugin
Published: 2019-10-16T13:00:47.000Z
CVE-2019-10444 
Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM.
Affected products: vendor: Jenkins project
product: Jenkins Bumblebee HP ALM Plugin
Published: 2019-10-16T13:00:47.000Z
CVE-2019-10445 
A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obtain limited information about the scope of a credential with an attacker-specified credentials ID.
Affected products: vendor: Jenkins project
product: Jenkins Google Kubernetes Engine Plugin
Published: 2019-10-16T13:00:48.000Z
CVE-2019-10446 
Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.
Affected products: vendor: Jenkins project
product: Jenkins Cadence vManager Plugin
Published: 2019-10-16T13:00:48.000Z
CVE-2019-10447 
Jenkins Sofy.AI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Sofy.AI Plugin
Published: 2019-10-16T13:00:49.000Z
CVE-2019-10448 
Jenkins Extensive Testing Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Extensive Testing Plugin
Published: 2019-10-16T13:00:49.000Z
CVE-2019-10449 
Jenkins Fortify on Demand Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Fortify on Demand Plugin
Published: 2019-10-16T13:00:50.000Z
CVE-2019-10450 
Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins ElasticBox CI Plugin
Published: 2019-10-16T13:00:51.000Z
CVE-2019-10451 
Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins SOASTA CloudTest Plugin
Published: 2019-10-16T13:00:51.000Z
CVE-2019-10452 
Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins View26 Test-Reporting Plugin
Published: 2019-10-16T13:00:51.000Z
CVE-2019-10453 
Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Delphix Plugin
Published: 2019-10-16T13:00:52.000Z
CVE-2019-10454 
A cross-site request forgery vulnerability in Jenkins Rundeck Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins Rundeck Plugin
Published: 2019-10-16T13:00:53.000Z
CVE-2019-10455 
A missing permission check in Jenkins Rundeck Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins Rundeck Plugin
Published: 2019-10-16T13:00:53.000Z
CVE-2019-10456 
A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins Oracle Cloud Infrastructure Compute Classic Plugin
Published: 2019-10-16T13:00:54.000Z
CVE-2019-10457 
A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins Oracle Cloud Infrastructure Compute Classic Plugin
Published: 2019-10-16T13:00:54.000Z
CVE-2019-10458 
Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.
Affected products: vendor: Jenkins project
product: Jenkins Puppet Enterprise Pipeline
Published: 2019-10-16T13:00:54.000Z
CVE-2019-10459 
Jenkins Mattermost Notification Plugin 2.7.0 and earlier stored webhook URLs containing a secret token unencrypted in its global configuration file and job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Mattermost Notification Plugin
Published: 2019-10-23T12:45:37.000Z
CVE-2019-10460 
Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Bitbucket OAuth Plugin
Published: 2019-10-23T12:45:38.000Z
CVE-2019-10461 
Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Dynatrace Application Monitoring Plugin
Published: 2019-10-23T12:45:38.000Z
CVE-2019-10462 
A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins Dynatrace Application Monitoring Plugin
Published: 2019-10-23T12:45:39.000Z
CVE-2019-10463 
A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins project
product: Jenkins Dynatrace Application Monitoring Plugin
Published: 2019-10-23T12:45:39.000Z
CVE-2019-10464 
A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.
Affected products: vendor: Jenkins project
product: Jenkins Deploy WebLogic Plugin
Published: 2019-10-23T12:45:40.000Z
CVE-2019-10465 
A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.
Affected products: vendor: Jenkins project
product: Jenkins Deploy WebLogic Plugin
Published: 2019-10-23T12:45:40.000Z
CVE-2019-10466 
An XML external entities (XXE) vulnerability in Jenkins 360 FireLine Plugin allows attackers with Overall/Read access to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.
Affected products: vendor: Jenkins project
product: Jenkins 360 FireLine Plugin
Published: 2019-10-23T12:45:41.000Z
CVE-2019-10467 
Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Sonar Gerrit Plugin
Published: 2019-10-23T12:45:41.000Z
CVE-2019-10468 
A cross-site request forgery vulnerability in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin
Published: 2019-10-23T12:45:42.000Z
CVE-2019-10469 
A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin
Published: 2019-10-23T12:45:42.000Z
CVE-2019-10470 
A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin
Published: 2019-10-23T12:45:43.000Z
CVE-2019-10471 
A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Libvirt Slaves Plugin
Published: 2019-10-23T12:45:43.000Z
CVE-2019-10472 
A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Libvirt Slaves Plugin
Published: 2019-10-23T12:45:44.000Z
CVE-2019-10473 
A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
Affected products: vendor: Jenkins project
product: Jenkins Libvirt Slaves Plugin
Published: 2019-10-23T12:45:44.000Z
CVE-2019-10474 
A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system.
Affected products: vendor: Jenkins project
product: Jenkins Global Post Script Plugin
Published: 2019-10-23T12:45:45.000Z
CVE-2019-10475 
A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.
Affected products: vendor: Jenkins project
product: Jenkins build-metrics Plugin
Published: 2019-10-23T12:45:45.000Z
CVE-2019-10476 
Jenkins Zulip Plugin 1.1.0 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Affected products: vendor: Jenkins project
product: Jenkins Zulip Plugin
Published: 2019-10-23T12:45:46.000Z
CVE-2019-10477 
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-29T13:07:23.000Z