Lucene search
+L

16 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-2243

Malicious code in bioql PyPI...

8.3CVSS7.8AI score0.00849EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-1944

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00735EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/05/22 4:30 p.m.•22 views

CVE-2020-2262

Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...

5.4CVSS6.4AI score0.00735EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/05/24 5:28 p.m.•30 views

Stored XSS vulnerability in android-lint Plugin

Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...

5.4CVSS4.9AI score0.00735EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/24 5:28 p.m.•65 views

GHSA-28X9-HC4P-9VH2 Stored XSS vulnerability in android-lint Plugin

Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...

8CVSS5.2AI score0.00735EPSS
SaveExploits0References4
NVD
NVD
•added 2020/09/16 2:15 p.m.•36 views

CVE-2020-2262

Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...

5.4CVSS0.00735EPSS
SaveExploits0References2
CVE
CVE
•added 2020/09/16 1:20 p.m.•94 views

CVE-2020-2262

CVE-2020-2262 affects Jenkins Android Lint Plugin versions 2.6 and earlier. The issue is that the plugin does not escape the annotation message in tooltips, causing a stored XSS vulnerability when an attacker can provide report files to the plugin’s post-build step. Impact is stored XSS in Jenkin...

5.4CVSS5.2AI score0.00735EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/09/16 1:20 p.m.•6 views

CVE-2020-2262

Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...

5.4CVSS0.00735EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/16 12:00 a.m.•7 views

CVE-2020-2262: Improper Neutralization of Input During Web Page Generation

Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...

5.4CVSS5.7AI score0.00735EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/02/27 12:00 a.m.•19 views

CloudBees Jenkins Android Lint Plugin Information Disclosure Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version release/testing projects and some timed tasks.Android Lint Plugin is used in one of the Android static Android Lint...

8.3CVSS6.9AI score0.00849EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/02/09 11:29 p.m.•31 views

CVE-2018-1000055

Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

8.3CVSS8.3AI score0.00849EPSS
SaveExploits0References1
CVE
CVE
•added 2018/02/09 11:00 p.m.•65 views

CVE-2018-1000055

XXE vulnerability (CVE-2018-1000055) affecting Jenkins Android Lint Plugin 2.5 and earlier. The plugin processes XML in build files, allowing an authenticated Jenkins user to trigger XML External Entity processing and potentially exfiltrate secrets from the Jenkins master, perform server-side req...

8.3CVSS8.1AI score0.00849EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/02/09 11:00 p.m.•40 views

CVE-2018-1000055

Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

8.2AI score0.00849EPSS
SaveExploits0References1
Mend
Mend
•added 2018/02/09 11:00 p.m.•9 views

CVE-2018-1000055

Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

8.3CVSS0.00849EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/09 12:00 a.m.•8 views

CVE-2018-1000055: Improper Restriction of XML External Entity Reference

Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

8.3CVSS7.7AI score0.00849EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/02/09 12:00 a.m.•10 views

PT-2018-9242

Name of the Vulnerable Software and Affected Versions: Jenkins Android Lint Plugin versions 2.5 and earlier Description: The issue allows attackers with user permissions to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks by processing XML...

8.3CVSS0.00849EPSS
SaveExploits0References4
Rows per page
Query Builder