CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Mend•added 2019/04/04 3:38 p.m.•4 views

CVE-2019-10290

A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpldoValidateAPI form validation method allowed attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

7.1CVSS0.01508EPSS

SaveExploits0References4

Mend•added 2019/04/04 3:38 p.m.•4 views

CVE-2019-10289

A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpldoValidateAPI form validation method allowed attackers to initiate a connection to an attacker-specified server...

7.1CVSS0.01339EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2019/04/04 12:00 a.m.•6 views

CVE-2019-10289: Cross-Site Request Forgery (CSRF)

6.5CVSS5.7AI score0.01339EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/04/04 12:00 a.m.•8 views

CVE-2019-10290: Missing Authorization

6.5CVSS5.8AI score0.01508EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by