Lucene search
+L

3820 matches found

CVE
CVE
•added 2026/09/02 3:40 p.m.•31 views

CVE-2026-84668

The Jenkins SAML Plugin versions 4.618.v441a_27fa_46d2 and earlier are vulnerable to an improper access control issue. The root cause lies in the Stapler data-binding mechanism , where a constructor annotated with @DataBoundConstructor allows unprivileged attackers to overwrite the SAML identity ...

5.9AI score0.00417EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 3:40 p.m.•39 views

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...

0.00417EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 3:40 p.m.•15 views

CVE-2026-84667

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an attacker-specified directory and to include arbitrary files from the Jenkins controller file system in backups...

5.9AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 3:40 p.m.•47 views

CVE-2026-84666

Jenkins Job Configuration History Plugin 1367.vc8fab15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings...

0.00136EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 3:40 p.m.•29 views

CVE-2026-84666

The Jenkins Job Configuration History Plugin (version 1367.vc8fa_b_15101dc and earlier) is vulnerable to an improper access control flaw. The issue stems from the use of the @DataBoundConstructor annotation, which allows the Stapler web framework to invoke @DataBoundSetter methods that manage the...

5.9AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 3:40 p.m.•39 views

CVE-2026-84667

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an attacker-specified directory and to include arbitrary files from the Jenkins controller file system in backups...

0.00377EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 3:40 p.m.•23 views

CVE-2026-84667

The Jenkins ThinBackup Plugin (version 2.1.4 and earlier ) is vulnerable to improper access control due to a flaw in Stapler data binding . The plugin incorrectly uses the @DataBoundConstructor annotation on a constructor, which allows the Stapler web framework to invoke @DataBoundSetter annotate...

5.9AI score0.00377EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•13 views

EUVD-2026-70133

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an attacker-specified directory and to include arbitrary files from the Jenkins controller file system in backups...

7.1CVSS5.9AI score0.00377EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•12 views

EUVD-2026-70132

Jenkins Job Configuration History Plugin 1367.vc8fab15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings...

5.9AI score0.00136EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 3:40 p.m.•9 views

CVE-2026-84666

Jenkins Job Configuration History Plugin 1367.vc8fab15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings...

5.8AI score0.00136EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•21 views

EUVD-2026-70130

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...

5.4CVSS5.9AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 3:40 p.m.•39 views

CVE-2026-84664

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...

0.00136EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 3:40 p.m.•30 views

CVE-2026-84664

The Jenkins GitLab Plugin (version 1.9.16 and earlier ) is vulnerable to a Server-Side Request Forgery (SSRF) due to improper access control in the Stapler data binding mechanism. Specifically, the use of the @DataBoundConstructor annotation allows attackers who can submit certain forms to overwr...

5.9AI score0.00136EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 3:40 p.m.•16 views

CVE-2026-84664

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...

5.9AI score0.00136EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 3:40 p.m.•15 views

CVE-2026-84662

Jenkins LDAP Plugin 807.809.vd3a4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL...

5.9AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•14 views

EUVD-2026-70128

Jenkins LDAP Plugin 807.809.vd3a4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL...

4.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 3:40 p.m.•21 views

CVE-2026-84662

The Jenkins LDAP Plugin (versions 807.809.vd3a_4e5e4ec98 and earlier) is vulnerable to Server-Side Request Forgery (SSRF) due to improper access control in the Stapler data-binding mechanism. The plugin uses the @DataBoundConstructor annotation on a constructor that connects to a specified URL wi...

5.9AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 3:40 p.m.•36 views

CVE-2026-84662

Jenkins LDAP Plugin 807.809.vd3a4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL...

0.00254EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/02 3:40 p.m.•6 views

CVE-2026-84659

Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data binding...

5.8AI score0.00281EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•13 views

EUVD-2026-70125

Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data binding...

4.3CVSS5.9AI score0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder