Lucene search
+L

403 matches found

vulnersOsv
vulnersOsv
•added 2022/05/14 1:04 a.m.•1 views

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2018-1000410 via org.jenkins-ci.main:jenkins-core (1.625.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...

7.8CVSS0.00433EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/14 1:04 a.m.•1 views

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2012-6153 +1 more via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2012-6153, CVE-2017-1000396 Source advisory: OSV:GHSA-FQ9F-9WV...

5.9CVSS0.05844EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:38 a.m.•0 views

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.42.0.4) +1515 more potentially affected by CVE-2017-12197 via org.kohsuke:libpam4j (>=1.6, <=1.8)

org.kohsuke:libpam4j MAVEN version =1.6, =0.0.1, =3.34.0.1, =3.10.4.4, =3.10.4.4, =3.12.0.1, =3.10.4.4, =3.10.4.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.42.0.4 and more Source cves: CVE-2017-12197 Source advisory: OSV:GHSA-X9RG-Q5FX-FX66...

6.5CVSS0.01511EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:38 a.m.•1 views

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.42.0.4) +1515 more potentially affected by CVE-2017-12197 via org.kohsuke:libpam4j (>=1.6, <=1.8)

org.kohsuke:libpam4j MAVEN version =1.6, =0.0.1, =3.34.0.1, =3.10.4.4, =3.10.4.4, =3.12.0.1, =3.10.4.4, =3.10.4.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.42.0.4 and more Source cves: CVE-2017-12197 Source advisory: GHSA-X9RG-Q5FX-FX66...

6.5CVSS0.01511EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:36 a.m.•2 views

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), org.jenkins-ci.main:jenkins-test-harness (1.520) +24 more potentially affected by CVE-2017-2609 via org.jenkins-ci.main:jenkins-core (1.520)

org.jenkins-ci.main:jenkins-core MAVEN version 1.520 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.4, =1.0.4, =1.0.4, =2.0,...

4.3CVSS0.01732EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:30 a.m.•3 views

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.4) +1304 more potentially affected by CVE-2015-5322 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.625.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.3, =1.0, =1.0, =2.2.1, =1.0.3, =1.0.0, =1.0, =1.0.0, =2.2.0, =3.1.0 and more Source cves: CVE-2015-5322 Source advisory: OSV:GHSA-89VC-7FRQ-2RFJ...

5CVSS0.03156EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:05 a.m.•2 views

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.grakn:grakn (>=0.13.0, <=0.14.0) +2167 more potentially affected by CVE-2015-0886 via org.mindrot:jbcrypt (0.3m)

org.mindrot:jbcrypt MAVEN version 0.3m is affected by a known vulnerability. The following packages have a transitive dependency on org.mindrot:jbcrypt and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =0.13.0, =0.13.0, =0.13.0, =0.13.0,...

5CVSS0.04803EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•0 views

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2018-1999002 Source advisory:...

7.5CVSS0.86463EPSS
SaveExploits7
vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•2 views

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2018-1999004 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2018-1999004 Source advisory:...

4.3CVSS0.00942EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2022/04/13 12:00 a.m.•53 views

GHSA-GP7C-XMMM-7PQR Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.4AI score0.00663EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/04/13 12:00 a.m.•46 views

Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.3AI score0.00663EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2022/04/13 12:00 a.m.•65 views

GHSA-FCR6-6CPH-VMCM Stored XSS vulnerability in Jenkins Git Parameter Plugin

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.4AI score0.0083EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/04/13 12:00 a.m.•97 views

Stored XSS vulnerability in Jenkins Git Parameter Plugin

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.3AI score0.0083EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2022/04/13 12:00 a.m.•65 views

Jenkins Git Parameter Plugin Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exis...

5.4CVSS1.3AI score0.0083EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/12 8:15 p.m.•35 views

CVE-2022-29038

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS0.00663EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/12 8:15 p.m.•34 views

CVE-2022-29040

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS0.0083EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/12 8:15 p.m.•11 views

CVE-2022-29040

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS6AI score0.0083EPSS
SaveExploits0References2
Prion
Prion
•added 2022/04/12 8:15 p.m.•27 views

Cross site scripting

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

3.5CVSS5.2AI score0.00663EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2022/04/12 7:50 p.m.•7 views

CVE-2022-29044

Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS0.00663EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/04/12 7:50 p.m.•45 views

CVE-2022-29040

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.8AI score0.0083EPSS
SaveExploits0References1
Rows per page
Query Builder