Most recent entries from all

cnvd-2019-36103

2026-10-06T01:34:14.535389+00:00

cnvd-2019-36103

EUVD-2026-53648

2026-10-06T01:34:14.535426+00:00

EUVD-2026-53648

fkie_cve-2019-10432

2026-10-06T01:34:14.535441+00:00

Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those.

GHSA-q829-hrmc-84c8 — Jenkins HTML Publisher Plugin vulnerable to Cross-site Scripting

2026-10-06T01:34:14.535469+00:00

Affected: Maven: org.jenkins-ci.plugins:htmlpublisher

Jenkins HTML Publisher Plugin prior to version 1.21 did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those. This issue has been patched in version 1.21

gsd-2019-10432

2026-10-06T01:34:14.535492+00:00

gsd-2019-10432

RHSA-2019:4055 — Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-2-plugins security update

2026-10-06T01:34:14.535504+00:00

jenkins-script-security-plugin: handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts jenkins-script-security-plugin: handling of property names in property expressions on the left-hand side of assignment expression leads to execute arbitrary code in sandboxed scripts jenkins-script-security-plugin: handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts jenkins-script-security-plugin: handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts jenkins-script-security: Sandbox bypass vulnerability in Script Security Plugin jenkins-2-plugins: Stored XSS vulnerability in HTML Publisher Plugin