CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1367 matches found

Positive Technologies•added 2025/10/29 12:00 a.m.•21 views

PT-2025-44297

Name of the Vulnerable Software and Affected Versions Jenkins Publish to Bitbucket Plugin versions 0.4 and earlier Description A flaw exists in the Jenkins Publish to Bitbucket Plugin where a missing permission check allows attackers possessing Overall/Read permission to enumerate credential IDs...

4.3CVSS5.7AI score0.00268EPSS

SaveExploits0References7

Rapid7 Vulnerability Database (full)•added 2025/10/29 12:00 a.m.•6 views

CVE-2025-64137: Missing Authorization

A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server...

4.3CVSS5.8AI score0.00295EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2025/10/29 12:00 a.m.•7 views

CVE-2025-64148: Missing Authorization

A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS5.9AI score0.00268EPSS

SaveExploits0References3

Jenkins Security Advisories•added 2025/10/29 12:00 a.m.•25 views

CSRF vulnerability and missing permission check in windocks-start-container

windocks-start-container 1.4 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery CSRF...

4.3CVSS5.8AI score0.00249EPSS

SaveExploits0Affected Software1

VulnCheck KEV•added 2025/10/17 12:00 a.m.•12 views

VulnCheck KEV: CVE-2025-59474

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read permission to list agent names through its sidepanel executors widget...

5.3CVSS6.9AI score0.04908EPSS

SaveIn wildExploits1References79