Lucene search
+L

12 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2022-3761

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.01553EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2022/05/13 1:36 a.m.•35 views

Incomplete List of Disallowed Inputs in Jenkins

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents SECURITY-358...

4.3CVSS5.2AI score0.01553EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2022/05/13 1:36 a.m.•10 views

GHSA-FFGG-VPHH-V273 Incomplete List of Disallowed Inputs in Jenkins

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents SECURITY-358...

4.3CVSS5.8AI score0.01553EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/12/02 10:04 p.m.•11 views

jenkins: Agent-to-controller access control allows reading/writing most content of build directories

An incorrect access restriction vulnerability was found in Jenkins. The directories agents are allowed to access include the directories where there are stored build-related information intended to allow agents to store build-related metadata during build execution. As a consequence, this allows ...

9.1CVSS5.8AI score0.01602EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/12/02 6:37 p.m.•10 views

jenkins: Agent-to-controller access control allows reading/writing most content of build directories

An incorrect access restriction vulnerability was found in Jenkins. The directories agents are allowed to access include the directories where there are stored build-related information intended to allow agents to store build-related metadata during build execution. As a consequence, this allows ...

9.1CVSS5.8AI score0.01602EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/12/01 12:28 p.m.•16 views

jenkins: Agent-to-controller access control allows reading/writing most content of build directories

An incorrect access restriction vulnerability was found in Jenkins. The directories agents are allowed to access include the directories where there are stored build-related information intended to allow agents to store build-related metadata during build execution. As a consequence, this allows ...

9.1CVSS5.8AI score0.01602EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/11/30 9:11 a.m.•23 views

jenkins: Agent-to-controller access control allows reading/writing most content of build directories

An incorrect access restriction vulnerability was found in Jenkins. The directories agents are allowed to access include the directories where there are stored build-related information intended to allow agents to store build-related metadata during build execution. As a consequence, this allows ...

9.1CVSS5.8AI score0.01602EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/11/29 10:40 a.m.•12 views

jenkins: Agent-to-controller access control allows reading/writing most content of build directories

An incorrect access restriction vulnerability was found in Jenkins. The directories agents are allowed to access include the directories where there are stored build-related information intended to allow agents to store build-related metadata during build execution. As a consequence, this allows ...

9.1CVSS5.8AI score0.01602EPSS
SaveExploits0References5
OSV
OSV
•added 2018/05/15 9:29 p.m.•27 views

CVE-2017-2602

jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents SECURITY-358...

4.3CVSS5AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2018/05/15 9:00 p.m.•31 views

CVE-2017-2602

jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents SECURITY-358...

3.1CVSS4.7AI score0.01553EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/15 12:00 a.m.•2 views

CVE-2017-2602: Incomplete List of Disallowed Inputs

jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents SECURITY-358...

4.3CVSS6.1AI score0.01553EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/02/02 3:20 p.m.•28 views

CVE-2017-2602

jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents SECURITY-358...

4.3CVSS4.5AI score0.01553EPSS
SaveExploits0References2
Rows per page
Query Builder