Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:31 a.m.6 views

CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

5.4CVSS5.7AI score0.00195EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.30 views

Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays Improper Input Validation (CVE-2018-16563)

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.35, Firmware variant MODBUS TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet module All versions, Firmware variant IEC104 for EN100 Ethernet module A...

5.9CVSS5.8AI score0.00491EPSS
Exploits0References3
NVD
NVD
added 2019/12/17 3:15 p.m.13 views

CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

5.4CVSS5.3AI score0.00195EPSS
Exploits0References2
CVE
CVE
added 2019/12/17 2:40 p.m.57 views

CVE-2019-16563

The CVE-2019-16563 entry concerns Jenkins Mission Control Plugin (versions 0.9.16 and earlier). The vulnerability is a stored XSS caused by the plugin not escaping job display names and build names displayed in its view, enabling an attacker who can modify these properties to inject script. Impac...

5.4CVSS5.2AI score0.00195EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/03/21 2:57 p.m.57 views

CVE-2018-16563

Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays are affected by CVE-2018-16563 due to improper input validation. Specially crafted packets sent to TCP port 102 can cause a denial-of-service, requiring a manual restart to restore EN100 module functionality. Exploitation requires ...

5.9CVSS5.5AI score0.00491EPSS
Exploits0References1Affected Software3
NVD
NVD
added 2017/11/06 8:29 a.m.11 views

CVE-2017-16563

Cross-Site Request Forgery CSRF in the Basic Settings screen on Vonage Grandstream HT802 devices allows attackers to modify settings, related to cgi-bin/update...

8CVSS7.9AI score0.00128EPSS
Exploits1References1
CVE
CVE
added 2017/11/06 8:0 a.m.46 views

CVE-2017-16563

The CVE-2017-16563 entry documents a CSRF flaw in the Basic Settings page of Vonage (Grandstream) HT802 home gateway devices. The vulnerability allows an attacker to modify device settings via the cgi-bin/update endpoint without proper authorization, as described in the description. Connected sou...

8CVSS7.8AI score0.00128EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2017/11/06 8:0 a.m.13 views

CVE-2017-16563

Cross-Site Request Forgery CSRF in the Basic Settings screen on Vonage Grandstream HT802 devices allows attackers to modify settings, related to cgi-bin/update...

8AI score0.00128EPSS
Exploits1References1
Rows per page
Query Builder