Lucene search
+L

3820 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2026/09/02 12:00 a.m.•12 views

Improper access control in jobConfigHistory

Jenkins uses the https://github.com/jenkinsci/staplerStapler web framework for HTTP request handling. Stapler's data-binding mechanism instantiates objects by invoking constructors annotated with @DataBoundConstructor, binding submitted data to their arguments, and setting additional properties...

5.4CVSS5.9AI score0.00136EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•17 views

PT-2026-84770

In Stapler 2107.v8dfcb e8ed317 and earlier, except 2088.2093.vd7c3e58008a 6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Stapler does not restrict the types of objects that can be instantiated via form data binding to those compatible with the expected field type, allowing...

8.8CVSS5.8AI score0.00518EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•16 views

PT-2026-84790

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an attacker-specified directory and to include arbitrary files from the Jenkins controller file system in backups...

5.9AI score0.00377EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2026/09/02 12:00 a.m.•12 views

Instantiation of any types related to configuration

Jenkins uses the https://github.com/jenkinsci/staplerStapler web framework for HTTP request handling. Stapler's form data binding instantiates configuration objects of types specified in form submissions. In Stapler 2107.v8dfcbe8ed317 and earlier, except 2088.2093.vd7c3e58008a6, included in Jenki...

8.8CVSS5.8AI score0.00518EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•16 views

PT-2026-84796

Jenkins Customizable Header Plugin 295.v2544b ca 19b 97 and earlier allows overwriting the plugin's appearance configuration through Stapler data binding, allowing attackers to configure a custom SVG icon containing inline JavaScript, resulting in a stored cross-site scripting XSS vulnerability...

8.8CVSS5.8AI score0.00509EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•17 views

PT-2026-84789

Jenkins Job Configuration History Plugin 1367.vc8fa b 15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings...

5.9AI score0.00136EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•17 views

PT-2026-84794

Jenkins File Parameter Plugin 425.v3fa 801681b 5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

8.8CVSS6.2AI score0.00835EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•16 views

PT-2026-84785

Jenkins LDAP Plugin 807.809.vd3a 4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL...

5.9AI score0.00254EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/01 1:30 p.m.•9 views

SUSE CVE-2026-72286

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper migration requires additional SNP-specific state such as...

8.8CVSS6.8AI score0.00175EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/01 11:31 a.m.•37 views

CVE-2026-77194 Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding

The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4.8.0. This is due to improper identity verification during the public registration flow in WordPress Multisite environments, where the...

5.3CVSS0.00583EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/09/01 11:31 a.m.•13 views

CVE-2026-77194 Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding

The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4.8.0. This is due to improper identity verification during the public registration flow in WordPress Multisite environments, where the...

5.3CVSS5.8AI score0.00583EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2026/09/01 7:04 a.m.•8 views

WordPress Simple Membership plugin <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding vulnerability

Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding vulnerability discovered by Kittipat Jitphonchana in WordPress Plugin Simple Membership versions = 4.8.1...

5.3CVSS5.9AI score0.00583EPSS
SaveExploits0References1Affected Software1
Atlassian
Atlassian
•added 2026/08/31 5:31 p.m.•8 views

BASM (Broken Authentication & Session Management) at Bouncy Castle Dependency in Crucible Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12803 was introduced in 4.9.0 and later of Crucible. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

8.7CVSS5.9AI score0.00201EPSS
SaveExploits0
OSV
OSV
•added 2026/08/31 2:37 p.m.•11 views

BIT-KEYCLOAK-2026-18201 Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations

Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without having the required permissions to manage that...

5.5CVSS5.9AI score0.00383EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/31 10:51 a.m.•11 views

EUVD-2026-68467

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execut...

5.4CVSS5.8AI score0.00314EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/31 10:51 a.m.•21 views

CVE-2026-82881

Aix-DB through version 1.2.4 is vulnerable to stored cross-site scripting (XSS) . The root cause is that markdown is rendered with raw HTML enabled and bound to v-html without sanitization (specifically in web/src/components/MarkdownPreview/plugins/markdown.ts). An attacker with low privileges ca...

5.4CVSS5.8AI score0.00314EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/31 10:51 a.m.•16 views

CVE-2026-82881 Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execut...

5.1CVSS5.8AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/08/31 10:51 a.m.•13 views

CVE-2026-82879 DataEase before 2.10.26 Access Control Bypass via Share Tickets

DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share can be reused against another ShareTicketManage.validateTicket / POST /de2api/share/proxyInfo. The POST...

6.3CVSS5.9AI score0.00361EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/31 10:51 a.m.•15 views

CVE-2026-82879 DataEase before 2.10.26 Access Control Bypass via Share Tickets

DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share can be reused against another ShareTicketManage.validateTicket / POST /de2api/share/proxyInfo. The POST...

5.3CVSS5.9AI score
SaveExploits0References7
F5 Networks
F5 Networks
•added 2026/08/31 7:59 a.m.•8 views

K000163144: Spring Data vulnerability CVE-2026-41696

Security Advisory Description Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affected...

5.9CVSS5.9AI score0.00332EPSS
SaveExploits0
Rows per page
Query Builder