Lucene search
+L

3028 matches found

Cvelist
Cvelist
added 2023/05/31 1:3 p.m.38 views

CVE-2023-34220

In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible...

4.6CVSS6.4AI score0.61173EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/31 12:0 a.m.7 views

PT-2023-24745 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05 Description: The issue concerns a stored XSS in the Commit Status Publisher window. Recommendations: For versions prior to 2023.05, update to version 2023.05 or later to resolve the issue...

5.4CVSS5.2AI score0.61173EPSS
SaveExploits0References4
NVD
NVD
added 2023/05/23 1:15 p.m.24 views

CVE-2023-25472

Cross-Site Request Forgery CSRF vulnerability in Podlove Podlove Podcast Publisher plugin = 3.8.3 versions...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/23 1:15 p.m.16 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Podlove Podlove Podcast Publisher plugin = 3.8.3 versions...

6.8CVSS8.7AI score0.00271EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/05/23 12:20 p.m.57 views

CVE-2023-25472

The CVE-2023-25472 entry concerns the WordPress Podlove Podlove Podcast Publisher plugin, affected versions

8.8CVSS6.5AI score0.00271EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/05/23 12:20 p.m.13 views

CVE-2023-25472 WordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Podlove Podlove Podcast Publisher plugin = 3.8.3 versions...

4.3CVSS7.2AI score0.00271EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.9 views

WordPress plugin Podlove Podcast Publisher 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.7AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.10 views

PT-2023-20090 · WordPress · Podlove Podcast Publisher

Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher plugin versions = 3.8.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS8.4AI score0.00271EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:0 a.m.7 views

The vulnerability of the license server dispatcher lmadmin FlexNet Publisher allows a violator to trigger a service failure.

The vulnerability of the license server dispatcher lmadmin FlexNet Publisher is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.00654EPSS
SaveExploits0References4Affected Software2
Github Security Blog
Github Security Blog
added 2023/05/16 6:30 p.m.24 views

Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking

Jenkins NS-ND Integration Performance Publisher Plugin stores credentials in job config.xml files on the Jenkins controller as part of its configuration. While these credentials are stored encrypted on disk, in NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier, the job...

7.5CVSS6.6AI score0.00569EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/05/16 6:30 p.m.40 views

GHSA-GQXR-HVRW-6HFH Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking

Jenkins NS-ND Integration Performance Publisher Plugin stores credentials in job config.xml files on the Jenkins controller as part of its configuration. While these credentials are stored encrypted on disk, in NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier, the job...

3.1CVSS7.6AI score0.00569EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/16 12:0 a.m.10 views

Jenkins NS-ND Integration Performance Publisher Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

7.5CVSS7.3AI score0.00569EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/05/12 12:0 a.m.12 views

The vulnerability of the Security component of the Oracle BI Publisher software allows a perpetrator to disclose protected information.

The vulnerability of the Security component of the Oracle BI Publisher software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through HTTP requests...

6.8CVSS6.7AI score0.00575EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/02 12:0 a.m.6 views

The vulnerability of the Web Server component of the Oracle BI Publisher software, which is used for creating reports, allows a hacker to disclose protected information.

The vulnerability of the Web Server component of the Oracle BI Publisher software exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information through HTTP requests...

4.3CVSS6.1AI score0.00481EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/04/25 12:0 a.m.30 views

Oracle Business Intelligence Publisher 12.2.1.4.0 < 12.2.1.4.230407 (April 2023 CPU)

The versions of Oracle Business Intelligence Publiosher installed on the remote host is affected by a vulnerability as referenced in the April 2023 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are...

4.3CVSS6.1AI score0.00481EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/04/25 12:0 a.m.47 views

Oracle Business Intelligence Publisher 6.4.0.0.0 < 6.4.0.0.230404 (OAS) (April 2023 CPU)

The versions of Oracle Business Intelligence Publisher OAS installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Security. The supported version that is...

5.7CVSS6.2AI score0.00575EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.13 views

The vulnerability of Microsoft Publisher software, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Publisher software, Microsoft Office packages, and Microsoft 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.8CVSS7.8AI score0.00742EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.15 views

The vulnerability of Microsoft Publisher software, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Publisher software, Microsoft Office packages, and Microsoft 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.8CVSS7.8AI score0.00742EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/04/18 8:15 p.m.29 views

CVE-2023-21970

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Security. The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require...

5.7CVSS5AI score0.00575EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/18 8:15 p.m.9 views

CVE-2023-21941

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful...

4.3CVSS6.3AI score0.00481EPSS
SaveExploits0References1
Rows per page
Query Builder