Lucene search
+L

1852 matches found

CNVD
CNVD
added 2020/09/17 12:00 a.m.10 views

CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2020-52608)

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . Jenkins Custom Job Icon plugi...

5.4CVSS6.5AI score0.00735EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/16 2:15 p.m.16 views

CVE-2020-2264

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

5.4CVSS5.5AI score
SaveExploits0References2
NVD
NVD
added 2020/09/16 2:15 p.m.23 views

CVE-2020-2264

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

5.4CVSS0.00735EPSS
SaveExploits0References2
Prion
Prion
added 2020/09/16 2:15 p.m.25 views

Cross site scripting

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

3.5CVSS5.3AI score0.00735EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/09/16 1:20 p.m.27 views

CVE-2020-2264

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

5.3AI score0.00735EPSS
SaveExploits0References2
CVE
CVE
added 2020/09/16 1:20 p.m.75 views

CVE-2020-2264

Summary: CVE-2020-2264 affects Jenkins Custom Job Icon Plugin (versions 0.2 and earlier). The vulnerability is a stored XSS caused by failing to escape job descriptions in tooltips. Exploitation requires attacker to have Job/Configure permission. Impact: stored XSS that can execute client-side co...

5.4CVSS5.2AI score0.00735EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/09/16 12:00 a.m.13 views

PT-2020-15489 · Jenkins · Jenkins Custom Job Icon Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Custom Job Icon Plugin versions 0.2 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the job descriptions in tooltips are not properly escaped. Attackers with...

5.4CVSS5.1AI score0.00735EPSS
SaveExploits0References6
Openbugbounty
Openbugbounty
added 2020/09/09 3:00 p.m.6 views

icon-icons.com Cross Site Scripting vulnerability OBB-1318361

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Citrix
Citrix
added 2020/08/13 12:00 a.m.13 views

Workspace App for Windows 1912 LTSR - Second icon displays in the system tray

Second icon displays in the system tray and unable to open the Workspace App using the second icon...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/08/10 12:00 a.m.45 views

openSUSE Security Update : opera (openSUSE-2020-1172)

This update for opera fixes the following issues : - Update to version 70.0.3728.71 - DNA-86267 Make Recently closed tabs appearance consistent with Search for open tabs. - DNA-86988 Opera 70 translations - DNA-87530 Zen news leads not loading - DNA-87636 Fix displaying folder icon for closed...

9.6CVSS7.7AI score0.1132EPSS
SaveExploits13References27
Tenable Nessus
Tenable Nessus
added 2020/08/06 12:00 a.m.42 views

openSUSE Security Update : opera (openSUSE-2020-1148)

This update for opera fixes the following issues : - Update to version 70.0.3728.71 - DNA-86267 Make Recently closed tabs appearance consistent with Search for open tabs. - DNA-86988 Opera 70 translations - DNA-87530 Zen news leads not loading - DNA-87636 Fix displaying folder icon for closed...

9.6CVSS7.7AI score0.1132EPSS
SaveExploits13References27
OpenVAS
OpenVAS
added 2020/07/21 12:00 a.m.10 views

openSUSE: Security Advisory for mumble (openSUSE-SU-2020:1016-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/07/21 12:00 a.m.24 views

openSUSE Security Update : mumble (openSUSE-2020-1016)

This update for mumble fixes the following issues : mumble was updated 1.3.2 : - client: Fixed overlay not starting Update to upstream version 1.3.1 - Security - Fixed: Potential exploit in the OCB2 encryption 4227 boo1174041 - ICE - Fixed: Added missing UserKDFIterations field to UserInfo =...

5.7AI score
SaveExploits0References1
Hacker One
Hacker One
added 2020/07/16 4:40 p.m.30 views

Bitwarden: Blind HTTP GET SSRF via website icon fetch (bypass of pull#812)

After a credential has been added to vault.bitwarden.com or any self-hosted installation, if the settings allow website icons to be fetched https://bitwarden.com/help/article/website-icons/, the Bitwarden server will try to fetch the icon image. The relevant source code is...

0.1AI score
SaveExploits0
OSV
OSV
added 2020/07/09 3:15 p.m.5 views

CVE-2020-12412

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain with the https:// scheme, a blocked port number such as '1', and without a lock icon while controlling the page contents. This vulnerability affects Firefox 70...

4.3CVSS6.7AI score0.00778EPSS
SaveExploits0References2
OSV
OSV
added 2020/07/09 3:15 p.m.8 views

UBUNTU-CVE-2020-12412

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain with the https:// scheme, a blocked port number such as '1', and without a lock icon while controlling the page contents. This vulnerability affects Firefox 70...

4.3CVSS5.8AI score0.00778EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2020/06/28 9:55 p.m.292 views

Xeexe - Undetectable And XOR Encrypting With Custom KEY (FUD Metasploit RAT)

Undetectable Reverse shell & Xor encrypting with custom KEYFUD Metasploit Rat bypass Top Antivirus like BitDefender,Malwarebytes,Avast,ESET-NOD32,AVG,...PYTHON 3 Undetectable Reverse shell Metasploit Rat Xeexe is an FUD exploiting tool which compiles a malware with famous payload, and then the...

7.3AI score
SaveExploits0References2
Apple
Apple
added 2020/06/19 10:46 a.m.89 views

About the security content of watchOS 6.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS0.5AI score0.04479EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:00 a.m.8 views

The vulnerability of the IG_load_file function in the ImageGear image processing library allows a hacker to execute arbitrary code.

The vulnerability of the IGloadfile function in the ImageGear image processing library is related to the output of the operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created ICO file...

9.8CVSS8.4AI score0.03597EPSS
SaveExploits1References6Affected Software1
Openbugbounty
Openbugbounty
added 2020/06/10 3:54 a.m.7 views

icon-generator.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1190321 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

SaveExploits0
Rows per page
Query Builder