Lucene search
K

7 matches found

OpenVAS
OpenVAS
added 2023/08/08 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-2631)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7CVSS7.2AI score0.00245EPSS
Exploits0References2
Circl
Circl
added 2023/05/16 10:30 p.m.2 views

CVE-2023-2631

creationtimestamp| type| source ---|---|--- 2023-05-16 22:30:44+00:00| seen| https://t.me/cibsecurity/64252 2025-01-22 21:02:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2650...

4.3CVSS5.3AI score0.0039EPSS
Exploits0References2
OSV
OSV
added 2023/05/16 7:15 p.m.2 views

CVE-2023-2631

A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

4.3CVSS5.8AI score0.0039EPSS
Exploits0References1
NVD
NVD
added 2023/05/16 7:15 p.m.12 views

CVE-2023-2631

A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

4.3CVSS4.5AI score0.0039EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/16 6:6 p.m.27 views

CVE-2023-2631 CSRF vulnerability and missing permission checks in Code Dx Plugin

A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

4.3CVSS4.9AI score0.0039EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2023/05/16 6:6 p.m.17 views

CVE-2023-2631

A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

4.3CVSS6.9AI score0.0039EPSS
Exploits0References1
CVE
CVE
added 2023/05/16 6:6 p.m.58 views

CVE-2023-2631

CVE-2023-2631 affects Jenkins Code Dx Plugin 3.1.0 and earlier. The issue is missing permission checks on several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified URL. Some endpoints do not require POST, enabling CSRF. Exploitation status is not ...

4.3CVSS4.5AI score0.0039EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder