Lucene search
+L

42 matches found

Cvelist
Cvelist
added 2025/10/29 1:29 p.m.17 views

CVE-2025-64136

A cross-site request forgery CSRF vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server...

0.00211EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 1:29 p.m.4 views

CVE-2025-64136

A cross-site request forgery CSRF vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server...

6.4AI score0.00211EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/29 1:29 p.m.32 views

CVE-2025-64136

The vulnerability CVE-2025-64136 affects Jenkins Themis Plugin versions 1.4.1 and earlier. Root cause: a cross-site request forgery (CSRF) flaw due to lack of permission checks in an HTTP endpoint, allowing an attacker with Overall/Read permission to trigger requests to an attacker-specified URL/...

4.3CVSS6.4AI score0.00211EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.12 views

PT-2025-44285

Name of the Vulnerable Software and Affected Versions Jenkins Themis Plugin versions 1.4.1 and earlier Description A cross-site request forgery CSRF issue exists in Jenkins Themis Plugin. This allows attackers to potentially connect to an HTTP server specified by the attacker. A CSRF attack...

4.3CVSS6.5AI score0.00211EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/10/29 12:00 a.m.10 views

Jenkins Themis Plugin 安全漏洞

Jenkins Themis Plugin is an open source plugin for Jenkins. A security vulnerability exists in Jenkins Themis Plugin 1.4.1 and earlier versions, which stems from a lack of privilege checking and could allow an attacker to connect to a specially crafted HTTP server...

4.3CVSS6.6AI score0.00275EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.12 views

PT-2025-44286

Name of the Vulnerable Software and Affected Versions Jenkins Themis Plugin versions 1.4.1 and earlier Description A flaw exists in the Jenkins Themis Plugin where a missing permission check allows attackers possessing Overall/Read permission to establish a connection to a HTTP server specified b...

4.3CVSS6.3AI score0.00275EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/10/29 12:00 a.m.11 views

Jenkins plugin Themis 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

4.3CVSS6.4AI score0.00211EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-43342

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00273EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.20 views

EUVD-2023-26812

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:44 a.m.14 views

CVE-2023-22683

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:46 a.m.18 views

CVE-2024-49276

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cliogrow Clio Grow clio-grow-form allows Reflected XSS.This issue affects Clio Grow: from n/a through = 1.0.2...

7.1CVSS5.9AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/17 8:15 p.m.36 views

CVE-2024-49276

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cliogrow Clio Grow clio-grow-form allows Reflected XSS.This issue affects Clio Grow: from n/a through = 1.0.2...

7.1CVSS0.00273EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/17 7:24 p.m.56 views

CVE-2024-49276

CVE-2024-49276 affects Themis Solutions, Inc. Clio Grow WordPress plugin (Clio Grow Form) with Reflected XSS in input handling. Impact is High (CVSS 3.1 base score 7.1) and affects versions 1.0.2 and earlier. The vulnerability arises from improper input neutralization during Web Page Generation. ...

7.1CVSS5.9AI score0.00273EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/17 7:24 p.m.19 views

CVE-2024-49276 WordPress Clio Grow plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cliogrow Clio Grow clio-grow-form allows Reflected XSS.This issue affects Clio Grow: from n/a through = 1.0.2...

7.1CVSS5.2AI score0.00273EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/22 10:25 p.m.5 views

Malicious code in audit-themis-i18n (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 37f93a88c028e5f97cf3f81fbfea413f78a01ea84f108247d6d5abf926f0dd73 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/08/22 10:25 p.m.4 views

MAL-2024-12210 Malicious code in audit-themis-i18n (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 37f93a88c028e5f97cf3f81fbfea413f78a01ea84f108247d6d5abf926f0dd73 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

6.8AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2024/04/06 5:46 a.m.8 views

ssl.editionsthemis.com Cross Site Scripting vulnerability OBB-3906999

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2023/05/03 2:15 p.m.40 views

CVE-2023-22683

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/03 2:15 p.m.20 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/03 1:43 p.m.8 views

CVE-2023-22683 WordPress Clio Grow Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References1
Rows per page
Query Builder