Lucene search
+L

13 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2022-4216

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00705EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-17299

Malicious code in bioql PyPI...

8CVSS6.3AI score0.00508EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/06/08 2:06 p.m.•16 views

CVE-2025-5806

Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...

8CVSS5.9AI score0.00508EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 2:15 p.m.•23 views

CVE-2025-5806

Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...

8CVSS0.00508EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/06 1:32 p.m.•28 views

CVE-2025-5806

Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...

0.00508EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 1:32 p.m.•115 views

CVE-2025-5806

The Jenkins Gatling Plugin version 136.vb_9009b_3d33a_e is vulnerable to a cross-site scripting (XSS) flaw. The issue stems from the plugin serving Gatling reports in a way that bypasses the Content-Security-Policy protections introduced in Jenkins versions 1.641 and 1.625 . This vulnerability is...

7.2AI score0.00508EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2025/06/06 1:32 p.m.•12 views

CVE-2025-5806

Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...

5.9AI score0.00508EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•1 views

CVE-2025-5806: Improper Neutralization of Input During Web Page Generation

Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...

8CVSS5.7AI score0.00508EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:19 p.m.•18 views

CVE-2020-2173

Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content...

5.4CVSS6AI score0.00705EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/05/24 5:13 p.m.•31 views

XSS vulnerability in Jenkins Gatling Plugin

Gatling Plugin 1.2.7 and earlier serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625.3. This results in a cross-site scripting XSS vulnerability exploitable by users able to change report content. Gatling Plugin 1.3.0 no...

5.4CVSS4.9AI score0.00705EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
•added 2020/04/08 12:00 a.m.•9 views

CloudBees Jenkins Gatling Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

5.4CVSS6.4AI score0.00705EPSS
SaveExploits0
NVD
NVD
•added 2020/04/07 1:15 p.m.•26 views

CVE-2020-2173

Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content...

5.4CVSS5.3AI score0.00705EPSS
SaveExploits0References2
Prion
Prion
•added 2020/04/07 1:15 p.m.•27 views

Cross site scripting

Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content...

3.5CVSS5.2AI score0.00705EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder