Jenkins 输入验证错误漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . An input validation error vulnerability exists in Jenkins CAS Plugin 1.6.0 and earlier versions, which stems from Jenki...

Jenkins cross-site scripting vulnerability (CNVD-2021-49067)

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . A cross-site scripting vulnerability exists in Jenkins Kiuwan Plugin, which stems from a cross-site scripting XSS...

CODESYS Group CODESYS Automation Server Cross-Site Request Forgery Vulnerability

CODESYS Group CODESYS Automation Server is an application from the German company CODESYS Group. It is used to manage control tasks. A cross-site request forgery vulnerability exists in CODESYS Group CODESYS Automation Server versions prior to 1.16.0. No detailed vulnerability details are current...

CVE-2021-29238

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

CVE-2021-29238

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

CVE-2021-29238

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

Cross site request forgery (csrf)

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

CVE-2021-29238

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

CVE-2021-29238: Cross-Site Request Forgery (CSRF)

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

PT-2021-18135

Name of the Vulnerable Software and Affected Versions: CODESYS Automation Server versions prior to 1.16.0 Description: The issue allows cross-site request forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For...

Vulnerability fixed in Atlassian Jira

Atlassian has fixed a vulnerability in Jira. The vulnerability allows a remote malicious person to manipulate to manipulate Jira templates. Atlassian has released updates to fix the vulnerability. fix. More information can be found on the page below:...

The vulnerability of the Jenkins automation server, related to the absence of the HTTP header Content-Security-Policy, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the Jenkins automation server is related to the absence of the HTTP header Content-Security-Policy. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

Jenkins Detection Consolidation

Consolidation of Jenkins automation server detections. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Jenkins groovy.util.Expando Java deserialization vulnerability

Added: 08/15/2017 CVE: CVE-2016-0792 BID: 83720 Background Jenkins is a standalone, open-source automation server written in Java. Problem A deserialization vulnerability in the groovy.util.Expando class allows a remote attacker to execute arbitrary commands by requesting createItem with speciall...

Schneider Electric Building Operation Automation Server Vulnerability

OVERVIEW Independent researcher Karn Ganeshen has identified a vulnerability in servers programmed with Schneider Electric’s StruxureWare Building Operation software. Schneider Electric has produced a new version to mitigate this vulnerability. This vulnerability could be exploited remotely...

Multiple Vulnerabilities in Schneider Electric Automation Server Series

Schneider Electric Automation Server is a multifunctional automation deployment server from Schneider Electric France. Schneider Electric Automation Server Series 1.7 and earlier versions contain a security bypass vulnerability, an operating system command injection vulnerability, and a privilege...

Schneider Electric StruxureWare Building Operation Automation Server msh bypass

Added: 03/14/2016 CVE: CVE-2016-2278 Background The Schneider Electric StruxureWare Building Operation software suite provides integrated monitoring, control, and management of energy, HVAC, lighting and fire safety. The Automation Server is a building automation system for small and medium-sized...

Schneider Electric StruxureWare Building Operation Automation Server msh bypass

Added: 03/14/2016 CVE: CVE-2016-2278 Background The Schneider Electric StruxureWare Building Operation software suite provides integrated monitoring, control, and management of energy, HVAC, lighting and fire safety. The Automation Server is a building automation system for small and medium-sized...

Schneider Electric StruxureWare Building Operation Automation Server msh bypass

Added: 03/14/2016 CVE: CVE-2016-2278 Background The Schneider Electric StruxureWare Building Operation software suite provides integrated monitoring, control, and management of energy, HVAC, lighting and fire safety. The Automation Server is a building automation system for small and medium-sized...

Schneider Electric StruxureWare Building Operation Automation Server msh bypass

Added: 03/14/2016 CVE: CVE-2016-2278 Background The Schneider Electric StruxureWare Building Operation software suite provides integrated monitoring, control, and management of energy, HVAC, lighting and fire safety. The Automation Server is a building automation system for small and medium-sized...