Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 12:16 p.m.•27 views

CVE-2018-1000108

A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...

6.1CVSS6.3AI score0.00827EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-5785

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00827EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/05/14 3:33 a.m.•26 views

Reflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin

A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...

6.1CVSS6.1AI score0.00827EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/05/14 3:33 a.m.•38 views

GHSA-XGMH-RVPW-6498 Reflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin

A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...

6.1CVSS5.9AI score0.00827EPSS
SaveExploits0References2
OSV
OSV
•added 2018/03/13 1:29 p.m.•29 views

CVE-2018-1000108

A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...

6.1CVSS6.1AI score
SaveExploits0References1
NVD
NVD
•added 2018/03/13 1:29 p.m.•32 views

CVE-2018-1000108

A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...

6.1CVSS6AI score0.00827EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/03/13 1:00 p.m.•41 views

CVE-2018-1000108

A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...

6AI score0.00827EPSS
SaveExploits0References1
Mend
Mend
•added 2018/03/13 1:00 p.m.•1 views

CVE-2018-1000108

A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...

6.1CVSS0.00827EPSS
SaveExploits0References2
CVE
CVE
•added 2018/03/13 1:00 p.m.•57 views

CVE-2018-1000108

Jenkins CppNCSS Plugin 1.1 and earlier is affected by a cross-site scripting (XSS) vulnerability in AbstractProjectAction/index.jelly. An attacker can craft links to Jenkins URLs that, when clicked by a user, execute arbitrary JavaScript in the user’s browser. The issue is documented across multi...

6.1CVSS6.3AI score0.00827EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/03/13 12:00 a.m.•2 views

PT-2018-9287

Name of the Vulnerable Software and Affected Versions: Jenkins CppNCSS Plugin version 1.1 and earlier Description: A cross-site scripting issue exists in the AbstractProjectAction/index.jelly file, allowing an attacker to create links to Jenkins URLs that execute arbitrary JavaScript code in the...

6.1CVSS0.00827EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/13 12:00 a.m.•6 views

CVE-2018-1000108: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...

6.1CVSS6.3AI score0.00827EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2018/02/26 12:00 a.m.•23 views

Reflected cross-site-scripting vulnerability in report URL of CppNCSS Plugin

CppNCSS Plugin did not properly escape the report name and graph name, resulting in a reflected cross-site scripting vulnerability. Report name and graph name are now properly escaped...

6.1CVSS5.8AI score0.00827EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder