Lucene search
+L

5 matches found

OpenVAS
OpenVAS
•added 2018/06/07 12:00 a.m.•116 views

Jenkins < 2.121 and < 2.107.3 LTS Multiple Vulnerabilities - Windows

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

8.1CVSS5AI score0.02612EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2018/06/07 12:00 a.m.•59 views

Jenkins < 2.121 and < 2.107.3 LTS Multiple Vulnerabilities - Linux

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

8.1CVSS5AI score0.02612EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/06/06 6:19 a.m.•30 views

CVE-2018-1000193

A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and canno...

4.3CVSS4.7AI score0.01045EPSS
SaveExploits0References2
OSV
OSV
•added 2018/06/05 9:29 p.m.•31 views

CVE-2018-1000193

A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and canno...

4.3CVSS4.8AI score
SaveExploits0References2
CVE
CVE
•added 2018/06/05 9:00 p.m.•122 views

CVE-2018-1000193

CVE-2018-1000193 is an improper neutralization of control sequences affecting Jenkins 2.120 and older (LTS 2.107.2 and older) in HudsonPrivateSecurityRealm.java. An attacker can sign up using usernames containing control characters that may appear to match other usernames and then be non-removabl...

4.3CVSS4.6AI score0.01045EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder