Lucene search
K

9 matches found

CNNVD
CNNVD
added 2025/12/18 12:0 a.m.2 views

WordPress plugin Fabric 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.6AI score0.0011EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-0201

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00623EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 11:39 a.m.6 views

CVE-2025-24403

A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins...

4.3CVSS6.4AI score0.00521EPSS
Exploits0References1
OSV
OSV
added 2025/01/22 6:31 p.m.9 views

GHSA-GP8P-49GR-JV8J Missing permission checks in Jenkins Azure Service Fabric Plugin

The Jenkins Azure Service Fabric Plugin 1.6 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins. Those can be used as part of an attack to capture the...

4.3CVSS4.8AI score0.00521EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/01/22 6:31 p.m.20 views

Missing permission checks in Jenkins Azure Service Fabric Plugin

The Jenkins Azure Service Fabric Plugin 1.6 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins. Those can be used as part of an attack to capture the...

4.3CVSS6.4AI score0.00521EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2025/01/22 5:15 p.m.11 views

CVE-2025-24402

A cross-site request forgery CSRF vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method...

4.3CVSS0.00623EPSS
Exploits0References1
NVD
NVD
added 2025/01/22 5:15 p.m.16 views

CVE-2025-24403

A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins...

4.3CVSS0.00521EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/22 5:2 p.m.16 views

CVE-2025-24403

A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins...

0.00521EPSS
Exploits0References1
CVE
CVE
added 2025/01/22 5:2 p.m.72 views

CVE-2025-24402

CVE-2025-24402 describes a CSRF vulnerability in Jenkins Azure Service Fabric Plugin

4.3CVSS6.5AI score0.00623EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder