CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4192 matches found

NVD•added 2019/10/23 1:15 p.m.•26 views

CVE-2019-10464

A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system...

8.8CVSS8.6AI score0.00767EPSS

SaveExploits0References2

OSV•added 2019/10/23 1:15 p.m.•15 views

CVE-2019-10465

A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file syste...

4.3CVSS6.8AI score

SaveExploits0References2

OSV•added 2019/10/23 1:15 p.m.•14 views

CVE-2019-10464

8.8CVSS6.9AI score

SaveExploits0References2

Prion•added 2019/10/23 1:15 p.m.•25 views

Design/Logic Flaw

4CVSS4.4AI score0.00788EPSS

SaveExploits0References2Affected Software1

Prion•added 2019/10/23 1:15 p.m.•21 views

Cross site request forgery (csrf)

6.8CVSS8.5AI score0.00767EPSS

SaveExploits0References2Affected Software1

AlpineLinux•added 2019/10/23 12:45 p.m.•55 views

CVE-2019-10464

8.8CVSS4.3AI score0.00767EPSS

SaveExploits0References2

Cvelist•added 2019/10/23 12:45 p.m.•33 views

CVE-2019-10464

8.6AI score0.00767EPSS

SaveExploits0References2

AlpineLinux•added 2019/10/23 12:45 p.m.•71 views

CVE-2019-10465

4.3CVSS4.5AI score0.00788EPSS

SaveExploits0References2

Cvelist•added 2019/10/23 12:45 p.m.•35 views

CVE-2019-10465

4.4AI score0.00788EPSS

SaveExploits0References2

CVE•added 2019/10/23 12:45 p.m.•64 views

CVE-2019-10464

The CVE-2019-10464 entry concerns a cross-site request forgery in the Jenkins Deploy WebLogic Plugin. The underlying issue: the plugin does not perform permission checks in a form validation method and does not require POST for that validation, allowing authenticated Jenkins users (with Overall/R...

8.8CVSS8.5AI score0.00767EPSS

SaveExploits0References2Affected Software1

CVE•added 2019/10/23 12:45 p.m.•68 views

CVE-2019-10465

CVE-2019-10465 affects the Jenkins Deploy WebLogic Plugin. The vulnerability is a missing permission check that allows users with Overall/Read access to connect to an attacker‑specified URL using attacker‑specified credentials or to probe for the existence of files/dirs on the Jenkins master file...

4.3CVSS4.3AI score0.00788EPSS

SaveExploits0References2Affected Software1

Jenkins Security Advisories•added 2019/10/23 12:0 a.m.•9 views

CSRF vulnerability and missing permission check in weblogic-deployer-plugin

weblogic-deployer-plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read access to Jenkins to send an HTTP HEAD request to a user-specified URL, or confirm the existence of any file or directory on the Jenkins controller...

8.8CVSS6.3AI score0.00788EPSS

SaveExploits0Affected Software1

Positive Technologies•added 2019/10/23 12:0 a.m.•8 views

PT-2019-11859 · Jenkins · Jenkins Deploy Weblogic Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Deploy WebLogic Plugin affected versions not specified Description: The issue is related to a missing permission check in the Jenkins Deploy WebLogic Plugin. This allows attackers with Overall/Read permission to connect to an...

4.3CVSS4.2AI score0.00788EPSS

SaveExploits0References5

Tenable Nessus•added 2019/10/17 12:0 a.m.•451 views

Oracle WebLogic Server Multiple Vulnerabilities (Oct 2019 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - An unspecified vulnerability in the jquery component of the Web Services of Oracle Weblogic Server. An unauthenticated, remote attacker can exploit this to gain unauthorized update, inser...

8.1CVSS6.9AI score0.87218EPSS

SaveExploits15References11

OSV•added 2019/10/16 6:15 p.m.•6 views

CVE-2019-2890

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle...

7.2CVSS6.8AI score0.37597EPSS

SaveExploits9References1

NVD•added 2019/10/16 6:15 p.m.•32 views

CVE-2019-2889

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

6.1CVSS5.5AI score0.01151EPSS

SaveExploits0References1

NVD•added 2019/10/16 6:15 p.m.•36 views

CVE-2019-2888

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

5.3CVSS4AI score0.04539EPSS

SaveExploits3References1

OSV•added 2019/10/16 6:15 p.m.•9 views

CVE-2019-2891

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

8.1CVSS6.8AI score0.01583EPSS

SaveExploits0References1

NVD•added 2019/10/16 6:15 p.m.•18 views

CVE-2019-2890

7.2CVSS6.5AI score0.37597EPSS

SaveExploits9References1

NVD•added 2019/10/16 6:15 p.m.•22 views

CVE-2019-2891

8.1CVSS7.5AI score0.01583EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by