Lucene search
K

922 matches found

CNVD
CNVD
added 2020/01/22 12:0 a.m.2 views

CloudBees Jenkins Amazon EC2 Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. CloudBees. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Amazon EC2 Plugin is used in which an EC2 connection agen...

8.1CVSS6.8AI score0.00047EPSS
Exploits0References1
CNVD
CNVD
added 2020/01/22 12:0 a.m.0 views

CloudBees Jenkins Robot Framework Plugin Code Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . CloudBees Jenkins Robot...

8.8CVSS7.2AI score0.00147EPSS
Exploits0References1
CNVD
CNVD
added 2020/01/22 12:0 a.m.1 views

Unauthorized Access Vulnerability in CloudBees Jenkins Redgate SQL Change Automation Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . CloudBees Jenkins Redgate SQL...

4.3CVSS7.5AI score0.00031EPSS
Exploits0References1
NVD
NVD
added 2020/01/15 7:15 p.m.20 views

CVE-2015-1809

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query...

7.5CVSS7.5AI score0.00132EPSS
Exploits0References2
NVD
NVD
added 2020/01/15 7:15 p.m.17 views

CVE-2015-1811

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...

7.5CVSS7.3AI score0.00125EPSS
Exploits0References2
Prion
Prion
added 2020/01/15 7:15 p.m.19 views

Xxe

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...

5CVSS6.9AI score0.00125EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/01/15 7:15 p.m.32 views

CVE-2015-1809

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query...

7.5CVSS7.2AI score0.00132EPSS
Exploits0References2
Prion
Prion
added 2020/01/15 7:15 p.m.23 views

Xxe

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query...

5CVSS7AI score0.00132EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/01/15 7:15 p.m.34 views

CVE-2015-1811

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...

7.5CVSS7.2AI score0.00125EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/01/15 6:5 p.m.23 views

CVE-2015-1811

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...

7.2AI score0.00125EPSS
Exploits0References2
CVE
CVE
added 2020/01/15 6:5 p.m.85 views

CVE-2015-1811

Jenkins XXE: XML External Entity handling flaw in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows reading arbitrary XML files via crafted XML documents. Root cause: improper XML processing. Affected products/versions are Jenkins core prior to 1.600 and LTS prior to 1.596.1. Remediati...

7.5CVSS7.2AI score0.00125EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/01/15 6:5 p.m.31 views

CVE-2015-1809

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query...

7.4AI score0.00132EPSS
Exploits0References2
CVE
CVE
added 2020/01/15 6:5 p.m.80 views

CVE-2015-1809

CVE-2015-1809 describes an XML External Entity (XXE) vulnerability in CloudBees Jenkins prior to 1.600 and in LTS releases prior to 1.596.1. The vulnerability arises from Jenkins' XPath/XML handling, allowing a remote attacker with read access to read arbitrary XML files on the Jenkins server. Af...

7.5CVSS7.3AI score0.00132EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/01/15 4:15 p.m.10 views

CVE-2020-2094

A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...

4.3CVSS6.5AI score
Exploits0References1
NVD
NVD
added 2020/01/15 4:15 p.m.17 views

CVE-2020-2094

A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...

4.3CVSS4.3AI score0.00061EPSS
Exploits0References1
OSV
OSV
added 2020/01/15 4:15 p.m.17 views

CVE-2020-2093

A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient...

8.8CVSS6.6AI score
Exploits0References1
NVD
NVD
added 2020/01/15 4:15 p.m.16 views

CVE-2020-2093

A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient...

8.8CVSS8.6AI score0.00089EPSS
Exploits0References1
Prion
Prion
added 2020/01/15 4:15 p.m.15 views

Cross site request forgery (csrf)

A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient...

6.8CVSS8.5AI score0.00089EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2020/01/15 4:15 p.m.23 views

Design/Logic Flaw

A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...

4CVSS4.4AI score0.00061EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/01/15 3:15 p.m.15 views

CVE-2020-2094

A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...

4.3AI score0.00061EPSS
Exploits0References1
Rows per page
Query Builder