Lucene search
K

87 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-11576

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.0001EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.12 views

EUVD-2022-3369

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00069EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-3006

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.0007EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-11574

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00105EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-11556

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00011EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/08 12:0 a.m.5 views

PT-2025-32392 · Unknown +1 · Ajaxplorer/Pydio Cells +1

Name of the Vulnerable Software and Affected Versions: AjaXplorer/Pydio Cells versions prior to 2.6 Description: An unauthenticated remote command execution vulnerability exists due to improper sanitization of user-supplied input to the destServer GET parameter within the checkInstall.php script ...

9.3CVSS8.3AI score0.78452EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/22 10:51 p.m.6 views

CVE-2022-30959

A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.4AI score0.0007EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:49 p.m.5 views

CVE-2022-30958

A cross-site request forgery CSRF vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

8.8CVSS6.6AI score0.00069EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:49 p.m.5 views

CVE-2022-30957

A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

4.3CVSS6.3AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:45 a.m.8 views

CVE-2017-1000245

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

9.8CVSS6.7AI score0.00061EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 1:21 a.m.17 views

CVE-2025-43014

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation...

6.5CVSS7AI score0.00105EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 11:53 p.m.7 views

CVE-2025-42921

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin...

6.5CVSS7AI score0.0001EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 6:47 p.m.20 views

CVE-2025-43012

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible...

8.3CVSS7.5AI score0.00011EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/04/25 12:0 a.m.21 views

JetBrains Toolbox App < 2.6 Multiple Vulnerabilities

The version of JetBrains Toolbox App installed on the remote host is prior to 2.6. It is, therefore, affected by multiple vulnerabilities: - In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible CVE-2025-43012 - In JetBrains Toolbox App before 2.6 host key verification...

9.8CVSS5.6AI score0.00105EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2025/04/24 12:0 a.m.1 views

The vulnerability of the SSH plugin of the JetBrains Toolbox, a set of development tools, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the SSH plugin of the JetBrains Toolbox developer’s tools is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.4CVSS5.5AI score0.00105EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2025/04/22 12:0 a.m.3 views

JetBrains Toolbox App Command Injection Vulnerability

JetBrains Toolbox App is an application for managing JetBrains development tools, providing installation, update, and management capabilities. JetBrains Toolbox App suffers from a command injection vulnerability that stems from the SSH plugin handling input improperly. An attacker could exploit t...

9.8CVSS7.5AI score0.00011EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/22 12:0 a.m.2 views

Unspecified Vulnerability in JetBrains Toolbox App (CNVD-2025-13584)

JetBrains Toolbox App is an application for managing JetBrains development tools, providing the ability to install, update and manage multiple JetBrains tools. A security vulnerability exists in JetBrains Toolbox App that stems from the lack of authentication of the host key in the SSH plugin. An...

6.5CVSS5.9AI score0.0001EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:16 p.m.17 views

CVE-2025-43014

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation...

6.5CVSS0.00105EPSS
Exploits0References1
OSV
OSV
added 2025/04/17 4:16 p.m.2 views

CVE-2025-43014

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation...

6.5CVSS5.8AI score0.00105EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.15 views

CVE-2025-42921

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin...

6.5CVSS0.0001EPSS
Exploits0References1
Rows per page
Query Builder