Lucene search
+L

1047 matches found

Cvelist
Cvelist
•added 2025/05/14 8:35 p.m.•64 views

CVE-2025-47885

Jenkins Health Advisor by CloudBees Plugin 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses...

0.00562EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/14 8:35 p.m.•87 views

CVE-2025-47885

The Jenkins Health Advisor by CloudBees Plugin (version 374.v194b_d4f0c8c8 and earlier) is vulnerable to stored cross-site scripting (XSS) . The root cause is a failure to properly escape or encode responses from the Jenkins Health Advisor server. An attacker capable of controlling these server r...

8.8CVSS5.7AI score0.00562EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/14 8:35 p.m.•11 views

CVE-2025-47885

Jenkins Health Advisor by CloudBees Plugin 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses...

5.5AI score0.00562EPSS
SaveExploits0References1
Mend
Mend
•added 2025/05/14 8:35 p.m.•7 views

CVE-2025-47885

Jenkins Health Advisor by CloudBees Plugin 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses...

8.8CVSS0.00562EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2025/05/14 8:35 p.m.•95 views

CVE-2025-47885

Jenkins Health Advisor by CloudBees Plugin 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses...

8.8CVSS5.8AI score0.00562EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/14 12:00 a.m.•19 views

Jenkins plugin Health Advisor by CloudBees 跨站脚本漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security vulnerability...

8.8CVSS5.7AI score0.00562EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/14 12:00 a.m.•3 views

CVE-2025-47885: Improper Neutralization of Input During Web Page Generation

Jenkins Health Advisor by CloudBees Plugin 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses...

8.8CVSS5.7AI score0.00562EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/14 12:00 a.m.•28 views

PT-2025-21238 · Cloudbees +1 · Jenkins Health Advisor By Cloudbees Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Health Advisor by CloudBees Plugin versions 374.v194b d4f0c8c8 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the plugin does not escape responses from the Jenkins...

8.8CVSS4.8AI score0.00562EPSS
SaveExploits0References11
Jenkins Security Advisories
Jenkins Security Advisories
•added 2025/05/14 12:00 a.m.•17 views

Stored XSS vulnerability in cloudbees-jenkins-advisor

cloudbees-jenkins-advisor 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses. cloudbees-jenkins-advisor...

8.8CVSS4.9AI score0.00562EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/05/13 9:16 p.m.•14 views

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.0016EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/13 9:16 p.m.•29 views

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

5.4CVSS5.8AI score0.0016EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/05/13 9:16 p.m.•6 views

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS5.8AI score0.0016EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/05/13 9:02 p.m.•23 views

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.0016EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/13 9:02 p.m.•7 views

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.2AI score0.0016EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/13 9:02 p.m.•62 views

CVE-2025-20079

CVE-2025-20079 affects Intel® Advisor standalone component software (pre-2024.2) and Intel® oneAPI Base Toolkit (pre-2024.2). Root cause: Uncontrolled search path, enabling potential local escalation of privilege for an authenticated user. Affected product scope is stated in Intel advisory and Re...

6.7CVSS7.2AI score0.0016EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•2 views

CVE-2025-20079: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS5.8AI score0.0016EPSS
SaveExploits0References1
Intel
Intel
•added 2025/05/13 12:00 a.m.•20 views

Intel® Advisor Software Advisory

Summary: Potential security vulnerability for some Intel® Advisor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20079 Description: Uncontrolled search path for some Intel® Advisor...

6.7CVSS7AI score0.0016EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•11 views

PT-2025-21088

Name of the Vulnerable Software and Affected Versions: IntelR Advisor affected versions not specified Description: The issue concerns an uncontrolled search path in some IntelR Advisor software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.3AI score0.0016EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/05/13 12:00 a.m.•13 views

Intel Advisor 代码问题漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A code issue vulnerability exists in Intel Advisor that stems from an improperly controlled search path that could lead to elevation of privilege...

6.7CVSS6.8AI score0.0016EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/05/09 12:00 a.m.•22 views

The vulnerability of the QRadar Advisor with Watson analytical security threat analysis tool lies in insufficient validation of incoming requests, allowing attackers to carry out SSRF attacks.

The vulnerability of the QRadar Advisor with Watson analytical security threat analysis tool is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

4.1CVSS5.5AI score0.00289EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder