CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

348 matches found

Cvelist•added 2019/02/06 4:00 p.m.•83 views

CVE-2019-1003010

A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record...

4.8AI score0.01145EPSS

SaveExploits0References3

CVE•added 2019/02/06 4:00 p.m.•119 views

CVE-2019-1003010

The CVE-2019-1003010 entry concerns Jenkins Git Plugin (versions 3.9.1 and earlier). The issue is a cross-site request forgery in src/main/java/hudson/plugins/git/GitTagAction.java that lets an attacker create a Git tag in a workspace and attach metadata to a build record. The documents do not sp...

4.3CVSS4.3AI score0.01145EPSS

SaveExploits0References3Affected Software1

Mend•added 2019/02/06 4:00 p.m.•4 views

CVE-2019-1003010

5.3CVSS0.01145EPSS

SaveExploits0References5

AlpineLinux•added 2019/02/06 4:00 p.m.•140 views

CVE-2019-1003010

4.3CVSS5.1AI score0.01145EPSS

SaveExploits0References3

Positive Technologies•added 2019/02/06 12:00 a.m.•4 views

PT-2019-11308

Name of the Vulnerable Software and Affected Versions: Jenkins Git Plugin versions 3.9.1 and earlier Description: A cross-site request forgery issue exists that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record. This is due to a vulnerability ...

4.3CVSS0.01145EPSS

SaveExploits0References7

Rapid7 Vulnerability Database (full)•added 2019/02/06 12:00 a.m.•7 views

CVE-2019-1003010: Cross-Site Request Forgery (CSRF)

4.3CVSS8.1AI score0.01145EPSS

SaveExploits0References2

Jenkins Security Advisories•added 2019/01/28 12:00 a.m.•16 views

CSRF vulnerability in Git Plugin

Git Plugin allows the creation of a tag in a job workspace's Git repository with accompanying metadata attached to a build record. The HTTP endpoint to create the tag did not require POST requests, resulting in a CSRF vulnerability. The HTTP endpoint to create the tag now requires that requests a...

4.3CVSS6.1AI score0.01145EPSS

SaveExploits0Affected Software1

CNVD•added 2018/06/07 12:00 a.m.•25 views

CloudBees Jenkins Git Plugin Multiple File Server-Side Request Forgery Vulnerability

CloudBees Jenkins is the U.S. CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Git Plugin is used in one of the version control plugin . A...

6.4CVSS6.6AI score0.00809EPSS

SaveExploits0References1

RedhatCVE•added 2018/06/06 2:51 p.m.•42 views

CVE-2018-1000182

A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, ViewGitWeb.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a...

6.4CVSS5.5AI score0.00809EPSS

SaveExploits0References2

NVD•added 2018/06/05 8:29 p.m.•42 views

CVE-2018-1000182

6.4CVSS6.3AI score0.00809EPSS

SaveExploits0References1

Prion•added 2018/06/05 8:29 p.m.•34 views

Server side request forgery (ssrf)

5.5CVSS6.2AI score0.00809EPSS

SaveExploits0References1Affected Software1

osv-cve•added 2018/06/05 8:29 p.m.•40 views

CVE-2018-1000182

6.4CVSS6.5AI score

SaveExploits0References1

Mend•added 2018/06/05 8:00 p.m.•8 views

CVE-2018-1000182

6.4CVSS0.00809EPSS

SaveExploits0References4

Cvelist•added 2018/06/05 8:00 p.m.•49 views

CVE-2018-1000182

6.6AI score0.00809EPSS

SaveExploits0References1

CVE•added 2018/06/05 8:00 p.m.•116 views

CVE-2018-1000182

A server-side request forgery (SSRF) vulnerability exists in Jenkins Git Plugin 3.9.0 and older. In AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, and ViewGitWeb.java, attackers with Overall/Read access can cause Jenkins to send a GET request to a...

6.4CVSS6.2AI score0.00809EPSS

SaveExploits0References1Affected Software1

AlpineLinux•added 2018/06/05 8:00 p.m.•100 views

CVE-2018-1000182

6.4CVSS5.5AI score0.00809EPSS

SaveExploits0References1

Positive Technologies•added 2018/06/05 12:00 a.m.•3 views

PT-2018-9351

Name of the Vulnerable Software and Affected Versions Jenkins Git Plugin version 3.9.0 and older Description A server-side request forgery issue exists that allows attackers with Overall/Read access to cause the system to send a GET request to a specified URL. This is due to vulnerabilities in...

6.4CVSS0.00809EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2018/06/05 12:00 a.m.•5 views

CVE-2018-1000182: Server-Side Request Forgery (SSRF)

6.4CVSS6.9AI score0.00809EPSS

SaveExploits0References2

Jenkins Security Advisories•added 2018/06/04 12:00 a.m.•17 views

Server-side request forgery vulnerability in Git Plugin

Various form validation methods in Git Plugin did not check the permission of the user accessing them, allowing anyone with Overall/Read access to Jenkins to cause Jenkins to send a GET request to a specified URL. Additionally, these form validation methods did not require POST requests, resultin...

6.4CVSS6.9AI score0.00809EPSS

SaveExploits0Affected Software1

CNVD•added 2018/03/27 12:00 a.m.•18 views

Jenkins Git Plugin Information Disclosure Vulnerability

Jenkins is an open source software project , is based on Java development of a continuous integration tool . A security vulnerability exists in the GitStatus.java file in Jenkins Git Plugin 3.7.0 and earlier versions. An attacker can exploit the vulnerability to obtain a list of nodes and users...

5.3CVSS6.8AI score0.03914EPSS

SaveExploits2References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by