Lucene search
+L

4490 matches found

attackerkb
attackerkb
•added 2022/04/12 8:15 p.m.•13 views

CVE-2022-29050

A cross-site request forgery CSRF vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers to connect to an FTP server using attacker-specified credentials...

8.8CVSS7.2AI score0.00726EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•11 views

PT-2022-19390 · Jenkins · Jenkins Publish Over Ftp Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Publish Over FTP Plugin versions 1.16 and earlier Description: A cross-site request forgery CSRF issue allows attackers to connect to an FTP server using attacker-specified credentials. Recommendations: For Jenkins Publish Over FTP...

8.8CVSS8.6AI score0.00726EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•19 views

Jenkins Publish Over FTP Plugin 访问控制错误漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Publish Over FTP Plugin 1.16 an...

4.3CVSS5.7AI score0.00749EPSS
SaveExploits0References4
osv-ubuntu
osv-ubuntu
•added 2022/04/06 1:15 a.m.•39 views

UBUNTU-CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

8.1CVSS5.8AI score0.00921EPSS
SaveExploits0References3
NVD
NVD
•added 2022/03/30 5:15 p.m.•33 views

CVE-2022-22772

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution RCE vulnerability that allows a low privileged attacker with...

8.5CVSS0.0234EPSS
SaveExploits0References2
Prion
Prion
•added 2022/03/30 5:15 p.m.•29 views

Remote code execution

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution RCE vulnerability that allows a low privileged attacker with...

8.5CVSS7.9AI score0.0234EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/03/30 4:40 p.m.•42 views

CVE-2022-22772 TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution RCE vulnerability that allows a low privileged attacker with...

8.5CVSS9AI score0.0234EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/30 12:00 a.m.•20 views

TIBCO Managed File Transfer Platform Server 代码注入漏洞

TIBCO Managed File Transfer Platform Server is a hosted file transfer platform server from TIBCO USA. A security vulnerability exists in the cfsend, cfrecv, and CyberResp components of TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux...

8.5CVSS8AI score0.0234EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/30 12:00 a.m.•9 views

CVE-2022-22772: Undefined Security Weakness

The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution RCE vulnerability that allows a low privileged attacker with...

8.5CVSS7.7AI score0.0234EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/30 12:00 a.m.•7 views

PT-2022-15663

Name of the Vulnerable Software and Affected Versions TIBCO Managed File Transfer Platform Server for UNIX versions 8.1.0 and below TIBCO Managed File Transfer Platform Server for z/Linux versions 8.1.0 and below Description The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s...

8.5CVSS6.4AI score0.0234EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2022/03/29 1:15 p.m.•12 views

CVE-2022-28157

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server...

6.5CVSS6AI score0.01432EPSS
SaveExploits0References3
osv-cve
osv-cve
•added 2022/03/29 1:15 p.m.•13 views

CVE-2022-28157

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server...

6.5CVSS6.6AI score
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/29 12:00 a.m.•16 views

Jenkins Pipeline Phoenix AutoTest Plugin 路径遍历漏洞

Jenkins Pipeline is a set of plug-ins that support the implementation and integration of continuous delivery pipelines into Jenkins.The Jenkins Pipeline Phoenix AutoTest Plugin 1.3 and earlier versions are vulnerable to a path traversal vulnerability that could be exploited by an attacker with...

6.5CVSS5.8AI score0.01432EPSS
SaveExploits0References5
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/03/29 12:00 a.m.•16 views

Arbitrary file read vulnerability in Pipeline: Phoenix AutoTest

Pipeline: Phoenix AutoTest 1.3 and earlier implements a Pipeline step ftp to upload files to an FTP server without limiting the source directory. This allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server...

6.5CVSS6.5AI score0.01432EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/29 12:00 a.m.•8 views

PT-2022-18856 · Jenkins · Jenkins Pipeline: Phoenix Autotest Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Phoenix AutoTest Plugin versions 1.3 and earlier Description: The issue allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server...

6.5CVSS6.3AI score0.01432EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/03/28 12:00 a.m.•16 views

Pro2col Stingray FTS 跨站脚本漏洞

Pro2col StingRay FTS is a file transfer server for Internet communication from Pro2col, UK. A cross-site scripting vulnerability exists in the Pro2col Stingray FTS that stems from the fact that manipulation of the Username parameter can lead to a cross-site scripting vulnerability...

6.1CVSS5.8AI score0.00615EPSS
SaveExploits1References3
Tibco
Tibco
•added 2022/03/24 11:22 p.m.•34 views

TIBCO Security Advisory: March 30, 2022 - TIBCO Managed File Transfer Platform Server -2022-22772

TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability Original release date: March 30,2022 Last revised: --- CVE-2022-22772 Source: TIBCO Software Inc. Products Affected TIBCO Managed File Transfer Platform Server for UNIX versions 8.1.0 and below TIBCO Managed File...

8.5CVSS8.4AI score0.0234EPSS
SaveExploits0Affected Software1
Tibco
Tibco
•added 2022/03/24 11:22 p.m.•29 views

TIBCO Security Advisory: March 30, 2022 - TIBCO Managed File Transfer Platform Server -2022-22772

TIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability Original release date: March 30,2022 Last revised: --- CVE-2022-22772 Source: TIBCO Software Inc. Products Affected TIBCO Managed File Transfer Platform Server for UNIX versions 8.1.0 and below TIBCO Managed File...

8.5CVSS8.6AI score0.0234EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•15 views

The vulnerability of the RouterOS operating system in MikroTik routers allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik routers lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure through a specially crafted FTP request...

7.8CVSS7.4AI score0.0125EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2022/03/03 12:00 a.m.•25 views

SolarWinds Serv-U FTP Server 路径遍历漏洞

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US-based SolarWinds. A path traversal vulnerability exists in SolarWinds Serv-U FTP Server. The vulnerability arises from a failure of a network system or product to properly filter special elements in the path...

7.5CVSS7.3AI score0.12804EPSS
SaveExploits2References5
Rows per page
Query Builder