Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

CVE-2022-36886

The CVE-2022-36886 entry concerns a CSRF vulnerability in Jenkins External Monitor Job Type Plugin versions 191.v363d0d1efdf8 and earlier, which allows attackers to create runs of an external job. Root cause: the plugin’s HTTP endpoint does not require POST requests, enabling CSRF. Affected compo...

PT-2022-4021 · Jenkins · Jenkins External Monitor Job Type Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins External Monitor Job Type Plugin versions 191.v363d0d1efdf8 and earlier Description: A cross-site request forgery CSRF vulnerability in the Jenkins External Monitor Job Type Plugin allows attackers to create runs of an external job...

CVE-2022-36886: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

Jenkins Plugin External Monitor Job Type 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is an application software. A cross-site request...

CSRF vulnerability in external-monitor-job

external-monitor-job 191.v363d0d1efdf8 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to create runs of an external job. external-monitor-job 192.ve979ca8b3ccd requires POST request...

July 21, 2022—KB5015882 (OS Build 22000.832) Preview

None None...

Apache SkyWalking Denial of Service Vulnerability

Apache SkyWalking is an application performance monitor from the Apache Foundation that is primarily used in environments such as microservices, cloud-native and container-based. A denial of service vulnerability exists in Apache SkyWalking NodeJS Agent prior to version 0.5.1, which stems from an...

Mitsubishi Electric MC Works64和Mitsubishi Electric Iconics Digital Solutions 代码问题漏洞

Mitsubishi Electric MC Works64 and Mitsubishi Electric Iconics Digital Solutions are both products of Mitsubishi Electric, Japan.Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA. Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA, and...

Oracle MySQL Enterprise Monitor (July 2022 CPU)

The version of MySQL Enterprise Monitor installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2022 CPU advisory. - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL component: Monitoring: General highlight.js. Supported versions that a...

Oracle MySQL Enterprise Monitor DOS (July 2022 CPU)

The version of MySQL Enterprise Monitor installed on the remote host are affected by a denial of service as referenced in the July 2022 CPU advisory, via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux application. A malicious user or attacker can send multiple...

WordPress plugin Download Monitor Arbitrary File Download Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An arbitrary file download...

Website File Changes Monitor < 1.8.3 - Admin+ SQLi

The plugin does not sanitise and escape user input before using it in a SQL statement via an action available to users with the manageoptions capability by default admins, leading to an SQL injection A user with manageoptions permission can exploit the vulnerability with the following request :...

WordPress Website File Changes Monitor plugin <= 1.8.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Nicolas VIDAL TEHTRIS in WordPress Website File Changes Monitor plugin versions = 1.8.2. Solution Update the WordPress Website File Changes Monitor plugin to the latest available version at least 1.8.3...

CVE-2022-2222

The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup...

CVE-2022-2222

The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup...

CVE-2022-2222

The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup...