CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1367 matches found

Jenkins Security Advisories•added 2025/10/29 12:00 a.m.•25 views

CSRF vulnerability and missing permission check in themis

themis 1.4.1 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery CSRF vulnerability. A...

4.3CVSS5.8AI score0.00295EPSS

SaveExploits0Affected Software1

Jenkins Security Advisories•added 2025/10/29 12:00 a.m.•22 views

CSRF vulnerability and missing permission check in windocks-start-container

windocks-start-container 1.4 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery CSRF...

4.3CVSS5.8AI score0.00249EPSS

SaveExploits0Affected Software1

Jenkins Security Advisories•added 2025/10/29 12:00 a.m.•22 views

CSRF vulnerability and missing permission check in publish-to-bitbucket

publish-to-bitbucket 0.4 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in...

5.4CVSS5.8AI score0.00243EPSS

SaveExploits0Affected Software1

Positive Technologies•added 2025/10/29 12:00 a.m.•28 views

PT-2025-44299

Name of the Vulnerable Software and Affected Versions Jenkins Publish to Bitbucket Plugin versions 0.4 and earlier Description A flaw exists where a missing permission check allows attackers possessing Overall/Read permission to establish a connection to a URL specified by the attacker, utilizing...

5.4CVSS5.7AI score0.00243EPSS

SaveExploits0References7

VulnCheck KEV•added 2025/10/17 12:00 a.m.•11 views

VulnCheck KEV: CVE-2025-59474

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read permission to list agent names through its sidepanel executors widget...

5.3CVSS6.9AI score0.04908EPSS

SaveIn wildExploits0References79