Lucene search
+L

20 matches found

OSV
OSV
•added 2026/09/08 8:16 a.m.•8 views

BIT-JENKINS-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

5.7AI score0.00583EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-88165

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.7AI score0.00583EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•12 views

EUVD-2026-70114

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00583EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 3:40 p.m.•38 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

0.00583EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/02 3:40 p.m.•10 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

5.7AI score0.00583EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 3:40 p.m.•15 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

5.8AI score0.00583EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 3:40 p.m.•29 views

CVE-2026-84648

In Jenkins versions 2.579 and earlier (including LTS 2.568.2 and earlier ), the system log viewer fails to escape log record metadata, such as source, level, and timestamp. This oversight leads to a stored cross-site scripting (XSS) vulnerability. The vulnerability is exploitable by attackers who...

5.8AI score0.00583EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•0 views

CVE-2026-84648: Improper Neutralization of Input During Web Page Generation

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.7AI score0.00583EPSS
SaveExploits0References3
Jenkins Security Advisories
Jenkins Security Advisories
•added 2026/09/02 12:00 a.m.•12 views

Stored XSS vulnerability in system log viewer

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes. TIP: On Jenkins 2.539 and newer, LTS...

8.8CVSS5.8AI score0.00583EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•13 views

PT-2026-84771

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00583EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2003-1487

Malware in sbrugna...

6.3CVSS6.4AI score0.01404EPSS
SaveExploits1References6
Fedora
Fedora
•added 2014/09/27 9:47 a.m.•37 views

[SECURITY] Fedora 20 Update: kdeadmin-4.14.1-1.fc20

The kdeadmin metapackage includes administrative tools including: kcron: systemsettings module for the cron task scheduler ksystemlog: system log viewer kuser: user manager...

6.9CVSS1.8AI score0.00359EPSS
SaveExploits1
Fedora
Fedora
•added 2011/04/21 5:29 a.m.•25 views

[SECURITY] Fedora 15 Update: kdeadmin-4.6.2-2.fc15

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler ksystemlog: system log viewer kuser: user manager...

4.3CVSS1.7AI score0.02673EPSS
SaveExploits2
Fedora
Fedora
•added 2010/05/26 9:45 p.m.•23 views

[SECURITY] Fedora 11 Update: kdeadmin-4.4.3-1.fc11.1

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler knetworkconf: systemsettings module for network settings ksystemlog: system log viewer kuser: user manager...

6.4CVSS1.5AI score0.03849EPSS
SaveExploits0
Fedora
Fedora
•added 2010/05/26 9:42 p.m.•21 views

[SECURITY] Fedora 13 Update: kdeadmin-4.4.3-1.fc13.1

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler knetworkconf: systemsettings module for network settings ksystemlog: system log viewer kuser: user manager...

6.4CVSS1.5AI score0.03849EPSS
SaveExploits0
Fedora
Fedora
•added 2010/05/26 9:41 p.m.•22 views

[SECURITY] Fedora 12 Update: kdeadmin-4.4.3-1.fc12.1

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler knetworkconf: systemsettings module for network settings ksystemlog: system log viewer kuser: user manager...

6.4CVSS1.5AI score0.03849EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2010/04/19 12:00 a.m.•33 views

Fedora Update for kdeadmin FEDORA-2010-6077

Check for the Version of kdeadmin OpenVAS Vulnerability Test Fedora Update for kdeadmin FEDORA-2010-6077 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

6.9CVSS0.2AI score0.00279EPSS
SaveExploits0References2
Fedora
Fedora
•added 2010/04/16 11:53 p.m.•61 views

[SECURITY] Fedora 11 Update: kdeadmin-4.4.2-1.fc11

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler knetworkconf: systemsettings module for network settings ksystemlog: system log viewer kuser: user manager...

6.9CVSS1.5AI score0.00279EPSS
SaveExploits0
Fedora
Fedora
•added 2009/09/15 7:39 a.m.•33 views

[SECURITY] Fedora 11 Update: kdeadmin-4.3.1-1.fc11

The kdeadmin package includes administrative tools including: kcron: systemsettings module for the cron task scheduler knetworkconf: systemsettings module for network settings ksystemlog: system log viewer kuser: user manager...

7.5CVSS1.5AI score0.01257EPSS
SaveExploits0
Cvelist
Cvelist
•added 2007/10/25 7:00 p.m.•34 views

CVE-2003-1497

Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long LogPageNum variable...

6.8AI score0.01404EPSS
SaveExploits1References5
Rows per page
Query Builder