4 matches found
CVE-2019-16564
Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names...
5.4CVSS6.1AI score0.00688EPSS
SaveExploits0References2
CVE-2018-16564
CVE-2018-16564 entry is rejected/not used; does not represent an active vulnerability.
7.4AI score
SaveExploits0
CVE-2017-16564
Affected : Vonage (Grandstream) HT802 home gateway devices. Vulnerability : Stored Cross-Site Scripting (XSS) in /cgi-bin/config2, exploitable via the DHCP vendor class ID field (P148). Impact : remote authenticated users can inject arbitrary web script/HTML (per CVE-2017-16564). Root cause : XSS...
5.4CVSS5.1AI score0.00614EPSS
SaveExploits1References1Affected Software1
20