Lucene search
+L

28619 matches found

Debian CVE
Debian CVE
•added 2019/11/19 2:53 p.m.•29 views

CVE-2012-0842

surf: cookie jar has read access from other local user...

5.5CVSS2AI score0.00381EPSS
SaveExploits0
CVE
CVE
•added 2019/11/19 2:53 p.m.•81 views

CVE-2012-0842

CVE-2012-0842 affects surf: the cookie jar can be read by a local user, enabling potential private cookie disclosure. The available documents describe the issue and its local access impact but do not provide exploitation details or remediation guidance.

5.5CVSS5.1AI score0.00381EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2019/11/18 9:15 p.m.•31 views

CVE-2012-4439

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins...

6.1CVSS5.9AI score0.01849EPSS
SaveExploits0References4
NVD
NVD
•added 2019/11/18 9:15 p.m.•28 views

CVE-2012-4438

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code...

8.8CVSS8.8AI score0.02385EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2019/11/18 9:15 p.m.•37 views

CVE-2012-4439

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins...

6.1CVSS6.5AI score0.01849EPSS
SaveExploits0References3
CVE
CVE
•added 2019/11/18 9:07 p.m.•131 views

CVE-2012-4441

CVE-2012-4441 : Jenkins Core prior to 1.482 and LTS prior to 1.466.2 are affected by a Cross‑Site Scripting (XSS) vulnerability in the CI Game plugin, allowing remote attackers to inject arbitrary scripts/HTML in the vulnerable UI. The issue stems from inadequate input validation in the plugin, l...

6.1CVSS6.8AI score0.01867EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2019/11/18 9:07 p.m.•35 views

CVE-2012-4441

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

6.4AI score0.01867EPSS
SaveExploits0References3
CVE
CVE
•added 2019/11/18 9:03 p.m.•138 views

CVE-2012-4440

CVE-2012-4440 is a Cross-site Scripting (XSS) vulnerability in Jenkins involving the Violations plugin. The issue affects Jenkins core builds prior to 1.482 and LTS lines prior to 1.466.2, where remote attackers could inject arbitrary web script or HTML via the Violations plugin. The connected do...

6.1CVSS6.8AI score0.01867EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2019/11/18 9:03 p.m.•42 views

CVE-2012-4440

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin...

6.4AI score0.01867EPSS
SaveExploits0References3
CVE
CVE
•added 2019/11/18 8:56 p.m.•118 views

CVE-2012-4439

Jenkins core is affected by CVE-2012-4439: XSS via a crafted URL in Jenkins < 1.482 and LTS

6.1CVSS6.6AI score0.01849EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2019/11/18 8:56 p.m.•41 views

CVE-2012-4439

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins...

6.3AI score0.01849EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
•added 2019/11/18 8:46 p.m.•2 views

columnpack:columnpack-plugin (1.0.3), com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.0, <=1.6.3) +634 more potentially affected by CVE-2012-4438 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.466.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.0, =0.1, =0.1, =0.5, =1.02.03, =1.0, =1.0.6 and more Source cves: CVE-2012-4438 Source advisory: MEND:CVE-2012-4438...

8.8CVSS0.02385EPSS
SaveExploits0
CVE
CVE
•added 2019/11/18 8:46 p.m.•134 views

CVE-2012-4438

Jenkins core before 1.482 and LTS before 1.466.2 is vulnerable to an input-validation issue that allows a user with read and HTTP access to the Jenkins master to insert data and execute arbitrary code. Affected components are org.jenkins-ci.main:jenkins-core in Jenkins prior to these versions. Im...

8.8CVSS8.7AI score0.02385EPSS
SaveExploits0References4Affected Software1
zdt
zdt
•added 2019/11/18 12:00 a.m.•160 views

Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Exploit Author: Kevin Randall​ Vendor Homepage: https://www.lexmark.com/enus.html​ Software Link: https://www.lexmark.com/enus.html​ Version: 2.27.4.0.39 Latest...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2019/11/18 12:00 a.m.•74 views

Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal

Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Google Dork: N/A​ Date: 2019​-11-15 Exploit Author: Kevin Randall​ Vendor Homepage: https://www.lexmark.com/enus.html​ Software Link:...

5CVSS7.6AI score0.16765EPSS
SaveExploits4
Packet Storm
Packet Storm
•added 2019/11/18 12:00 a.m.•153 views

Lexmark Services Monitor 2.27.4.0.39 Directory Traversal

Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Google Dork: N/A​ Date: 2019​-11-15 Exploit Author: Kevin Randall​ Vendor Homepage: https://www.lexmark.com/enus.html​ Software Link: https://www.lexmark.com/enus.html​ Version: 2.27.4.0.39 Latest Version​ Tested on: Window...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/11/18 12:00 a.m.•242 views

Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal

Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Google Dork: N/A Date: 2019-11-15 Exploit Author: Kevin Randall Vendor Homepage: https://www.lexmark.com/enus.html Software Link: https://www.lexmark.com/enus.html Version: 2.27.4.0.39 Latest Version Tested on: Windows Serv...

7.5CVSS7.3AI score0.16765EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
•added 2019/11/15 12:00 a.m.•26 views

SUSE SLES12 Security Update : bash (SUSE-SU-2019:2976-1)

This update for bash fixes the following issues : CVE-2012-6711: Fixed a heap-based buffer overflow during echo of unsupported characters bsc1138676. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

7.8CVSS7.5AI score0.00531EPSS
SaveExploits0References4
osv_suse
osv_suse
•added 2019/11/14 5:46 p.m.•12 views

SUSE-SU-2019:2976-1 Security update for bash

This update for bash fixes the following issues: - CVE-2012-6711: Fixed a heap-based buffer overflow during echo of unsupported characters bsc1138676...

7.8CVSS7.9AI score0.00531EPSS
SaveExploits0References3
NVD
NVD
•added 2019/11/14 5:15 p.m.•29 views

CVE-2012-1158

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export...

4.3CVSS5.7AI score0.01389EPSS
SaveExploits0References9
Rows per page
Query Builder