Lucene search
+L

5339 matches found

Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.8 views

PT-2025-44290

Name of the Vulnerable Software and Affected Versions Jenkins Nexus Task Runner Plugin versions 0.9.2 and earlier Description A cross-site request forgery CSRF issue exists in the Jenkins Nexus Task Runner Plugin. This allows attackers to connect to a URL specified by the attacker, using...

4.3CVSS6.5AI score0.0019EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.12 views

PT-2025-44291

Name of the Vulnerable Software and Affected Versions Jenkins Nexus Task Runner Plugin versions 0.9.2 and earlier Description A missing permission check allows attackers with Overall/Read permission to connect to a URL specified by the attacker, using credentials also specified by the attacker. T...

4.3CVSS6.4AI score0.00227EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.14 views

Jenkins Nexus Task Runner Plugin 安全漏洞

Jenkins Nexus Task Runner Plugin is an open source plugin for Jenkins. A security vulnerability exists in Jenkins Nexus Task Runner Plugin version 0.9.2 and earlier, which stems from vulnerability to a cross-site request forgery attack that could result in a connection to an attacker-specified UR...

4.3CVSS6.5AI score0.0019EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.7 views

Jenkins plugin Nexus Task Runner 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

4.3CVSS6.6AI score0.00227EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/10 4:20 p.m.5 views

CVE-2025-9868

Server-Side Request Forgery SSRF in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests...

8.7CVSS7.2AI score0.00462EPSS
Exploits0References1
NVD
NVD
added 2025/10/08 6:15 p.m.6 views

CVE-2025-9868

Server-Side Request Forgery SSRF in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests...

8.7CVSS0.00462EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/08 5:7 p.m.6 views

EUVD-2025-33291

Server-Side Request Forgery SSRF in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests...

8.7CVSS6.7AI score0.00462EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/08 5:7 p.m.16 views

CVE-2025-9868 Nexus Repository 2 - SSRF Vulnerability in Remote Browser Plugin

Server-Side Request Forgery SSRF in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests...

8.7CVSS0.00462EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/08 5:7 p.m.22 views

CVE-2025-9868 Nexus Repository 2 - SSRF Vulnerability in Remote Browser Plugin

Server-Side Request Forgery SSRF in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests...

8.7CVSS6.8AI score0.00462EPSS
Exploits0References1
CVE
CVE
added 2025/10/08 5:7 p.m.35 views

CVE-2025-9868

The vulnerability is a Server-Side Request Forgery (SSRF) in the Remote Browser Plugin of Sonatype Nexus Repository 2.x, up to and including 2.15.2. The issue allows unauthenticated remote attackers to exfiltrate proxy repository credentials by crafting HTTP requests. The root cause is SSRF in th...

8.7CVSS6.8AI score0.00462EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/08 12:0 a.m.6 views

Sonatype Nexus Repository 安全漏洞

Sonatype Nexus Repository is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype Nexus Repository version 2.15.2 and earlier, which stems from a server-side request forgery in the Remote...

8.7CVSS6.6AI score0.00462EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.14 views

PT-2025-41292

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository versions 2.0 through 2.15.2 Description A Server-Side Request Forgery SSRF exists in the Remote Browser Plugin. This allows unauthenticated remote attackers to extract proxy repository credentials via crafted HTTP...

8.7CVSS6.8AI score0.00462EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-9606

Malware in sbrugna...

9.3CVSS7.9AI score0.00557EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-10169

Malware in sbrugna...

7.2CVSS5.5AI score0.00471EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-0715

Malware in sbrugna...

4.6CVSS6.3AI score0.00261EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2016-3580

Malware in sbrugna...

5.5CVSS6AI score0.00356EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-9607

Malware in sbrugna...

9.3CVSS7.9AI score0.00557EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-1201

Malware in sbrugna...

8.6CVSS8.7AI score0.04483EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-6336

Malware in sbrugna...

4.9CVSS6.4AI score0.00336EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-10163

Malware in sbrugna...

7.8CVSS5.5AI score0.00487EPSS
Exploits0References3
Rows per page
Query Builder