Lucene search
+L

31 matches found

Vulnrichment
Vulnrichment
•added 2022/09/21 3:45 p.m.•9 views

CVE-2022-41229

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4AI score0.00617EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/09/21 3:45 p.m.•41 views

CVE-2022-41229

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.7AI score0.00617EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/21 3:45 p.m.•94 views

CVE-2022-41228

CVE-2022-41228 : Jenkins NS-ND Integration Performance Publisher Plugin, versions up to and including 4.8.0.129, contains a missing permission check that allows attackers with Overall/Read to connect to an attacker-specified webserver using attacker-specified credentials. The issue is confirmed b...

8.8CVSS8.4AI score0.00971EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
•added 2022/09/21 3:45 p.m.•39 views

CVE-2022-41227

A cross-site request forgery CSRF vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials...

8.8CVSS4.9AI score0.00543EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/21 3:45 p.m.•120 views

CVE-2022-41227

CVE-2022-41227 : Jenkins NS-ND Integration Performance Publisher Plugin, versions 4.8.0.129 and earlier, is affected by a cross-site request forgery (CSRF) vulnerability that allows attackers to connect to an attacker-specified webserver using attacker-specified credentials. The CVSS v3.1 base sc...

8.8CVSS8.6AI score0.00543EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/09/21 3:45 p.m.•35 views

CVE-2022-41227

A cross-site request forgery CSRF vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials...

8.9AI score0.00543EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•12 views

Jenkins NS-ND Integration Performance Publisher Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

8.8CVSS7.9AI score0.00971EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/21 12:00 a.m.•7 views

PT-2022-25744 · Jenkins · Jenkins Ns-Nd Integration Performance Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.134 and earlier Description: The issue results from the plugin not escaping configuration options of the Execute NetStorm/NetCloud Test build step, leading to a stored...

8CVSS5.2AI score0.00617EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•12 views

Jenkins NS-ND Integration Performance Publisher Plugin 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site scripting...

5.4CVSS5.5AI score0.00617EPSS
SaveExploits0References3
OSV
OSV
•added 2022/06/24 12:00 a.m.•43 views

GHSA-PV38-MQPP-V72H Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of th...

8CVSS5.7AI score0.0064EPSS
SaveExploits0References5
CVE
CVE
•added 2022/06/22 2:41 p.m.•116 views

CVE-2022-34191

CVE-2022-34191 refers to a stored XSS vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin, affecting version 4.8.0.77 and earlier. The issue arises because the plugin does not escape the name of NetStorm Test parameters on views that display parameters, enabling an attacker wi...

5.4CVSS5.2AI score0.0064EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder