Most recent entries from all

cnvd-2020-61921

2026-10-04T05:50:32.550323+00:00

cnvd-2020-61921

EUVD-2026-35986

2026-10-04T05:50:32.550364+00:00

EUVD-2026-35986

fkie_cve-2020-2306

2026-10-04T05:50:32.550379+00:00

A missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overall/Read permission to obtain a list of names of configured Mercurial installations.

GHSA-vrrc-3wwh-frgx — Missing Authorization in Jenkins Mercurial Plugin

2026-10-04T05:50:32.550407+00:00

Affected: Maven: org.jenkins-ci.plugins:mercurial

Mercurial Plugin prior to 2.12, 2.10.1, 2.9.1, and 2.8.1 does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to obtain a list of names of configured Mercurial installations.

Mercurial Plugin 2.12, 2.10.1, 2.9.1, and 2.8.1 performs permission checks when listing configured Mercurial installations.

gsd-2020-2306

2026-10-04T05:50:32.550436+00:00

gsd-2020-2306

RHSA-2021:0034 — Red Hat Security Advisory: OpenShift Container Platform 4.5.27 packages and security update

2026-10-04T05:50:32.550449+00:00

jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: Missing permission check in an HTTP endpoint could result in information disclosure jenkins-2-plugins/kubernetes: Jenkins controller environment variables are accessible in Kubernetes Plugin jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows enumerating credentials IDs python-urllib3: CRLF injection via HTTP request method