Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

jenkins / neuvector_vulnerability_scanner CVEs

Beta · best-effort

5 CVEs tagged to jenkins / neuvector_vulnerability_scanner — 0 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to jenkins vendor archive

CVE-2023-49674

Published Nov 29, 2023

A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hos…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-30517

Published Apr 12, 2023

Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vuln…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-43434

Published Oct 19, 2022

Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived art…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2019-10430

Published Sep 25, 2019

Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by…

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-5 of 5 CVEsPage 1 of 1