NVD disclosure day
CVE-2019-9636
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Python's URL parsing can lead to the disclosure of sensitive information like credentials or cookies. A specially crafted URL can cause incorrect parsing, potentially sending this data to an unintended host. This impacts applications using affected Python versions that process such URLs.
CVE-2019-1003030
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A sandbox bypass in the Jenkins Pipeline: Groovy plugin allows attackers to execute arbitrary code on the Jenkins master. This impacts organizations using affected versions of the plugin, potentially leading to a compromise of the Jenkins environment and associated systems. The risk is associated with unauthorized code
CVE-2019-1003029
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Jenkins Script Security Plugin allows attackers with read permissions to execute arbitrary code on the Jenkins master JVM. This could impact affected organizations by compromising systems and data, leading to significant business risk. Organizations should identify and update affected Jenkins ins