Lucene search
+L

10474 matches found

Tenable Nessus
Tenable Nessus
•added 2019/09/18 12:00 a.m.•28 views

WordPress 4.3.x < 4.3.20 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

6.1CVSS6.4AI score0.05181EPSS
SaveExploits5References9
Tenable Nessus
Tenable Nessus
•added 2019/09/18 12:00 a.m.•24 views

WordPress 4.9.x < 4.9.11 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

6.1CVSS6.4AI score0.05181EPSS
SaveExploits5References9
Veracode
Veracode
•added 2019/09/12 11:55 p.m.•32 views

Cross-site Scripting (XSS)

wordpress is vulnerable to cross-site scripting XSS. The attack is due to lack of sanitization of the output in dashboard, allowing an attacker to inject arbitrary script through it...

6.1CVSS2.9AI score0.01759EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2019/09/12 2:15 p.m.•34 views

CVE-2019-10396

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...

5.4CVSS5.3AI score0.00735EPSS
SaveExploits0References2
OSV
OSV
•added 2019/09/12 2:15 p.m.•21 views

CVE-2019-10396

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...

5.4CVSS6.1AI score
SaveExploits0References2
Prion
Prion
•added 2019/09/12 2:15 p.m.•23 views

Cross site scripting

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...

3.5CVSS5.2AI score0.00735EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2019/09/12 1:55 p.m.•103 views

CVE-2019-10396

CVE-2019-10396 affects Jenkins Dashboard View Plugin versions 2.11 and earlier. The root cause is failure to escape build descriptions in the Latest Builds View, enabling cross-site scripting by users who can modify build descriptions. Public sources (Red Hat, GitHub advisories, and CVE records) ...

5.4CVSS5.2AI score0.00735EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/09/12 1:55 p.m.•33 views

CVE-2019-10396

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...

5.2AI score0.00735EPSS
SaveExploits0References2
Mend
Mend
•added 2019/09/12 1:55 p.m.•3 views

CVE-2019-10396

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...

5.4CVSS0.00735EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/12 12:00 a.m.•6 views

CVE-2019-10396: Improper Neutralization of Input During Web Page Generation

Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions...

5.4CVSS5.9AI score0.00735EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/09/12 12:00 a.m.•16 views

PT-2019-11790 · Jenkins · Jenkins Dashboard View Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dashboard View Plugin versions 2.11 and earlier Description: The issue is related to a cross-site scripting vulnerability. It occurs because build descriptions are not properly escaped, allowing attackers who can change build...

5.4CVSS5.1AI score0.00735EPSS
SaveExploits0References6
Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/09/12 12:00 a.m.•18 views

Stored XSS vulnerability in dashboard-view

dashboard-view did not escape the build description on the Latest Builds View. This resulted in a cross-site scripting vulnerability exploitable by attackers able to control the description of builds shown on that view. dashboard-view now applies the configured markup formatter to the build...

5.4CVSS5.4AI score0.00735EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2019/09/11 2:15 p.m.•6 views

DEBIAN-CVE-2019-16221

WordPress before 5.2.3 allows reflected XSS in the dashboard...

6.1CVSS6.9AI score0.01759EPSS
SaveExploits0References1
OSV
OSV
•added 2019/09/11 2:15 p.m.•38 views

CVE-2019-16221

WordPress before 5.2.3 allows reflected XSS in the dashboard...

6.1CVSS5.8AI score
SaveExploits0References6
NVD
NVD
•added 2019/09/11 2:15 p.m.•24 views

CVE-2019-16221

WordPress before 5.2.3 allows reflected XSS in the dashboard...

6.1CVSS7.5AI score0.01759EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2019/09/11 2:15 p.m.•35 views

CVE-2019-16221

WordPress before 5.2.3 allows reflected XSS in the dashboard...

6.1CVSS6.9AI score0.01759EPSS
SaveExploits0References2
OSV
OSV
•added 2019/09/11 2:15 p.m.•7 views

UBUNTU-CVE-2019-16221

WordPress before 5.2.3 allows reflected XSS in the dashboard...

6.1CVSS7.3AI score0.01759EPSS
SaveExploits0References3
Mend
Mend
•added 2019/09/11 1:07 p.m.•3 views

CVE-2019-16221

WordPress before 5.2.3 allows reflected XSS in the dashboard...

6.1CVSS0.01759EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2019/09/11 1:07 p.m.•54 views

CVE-2019-16221

WordPress before 5.2.3 allows reflected XSS in the dashboard...

6.1CVSS3.2AI score0.01759EPSS
SaveExploits0
ThreatPost
ThreatPost
•added 2019/09/11 1:00 p.m.•128 views

CISO/CIO: Get an iPad and Apple Watch with an App Monitoring your Security 24/7

If you are a CISO or CIO, you need to know what is going on with your organizational security. Together with that, you cannot afford to be inundated with alerts, messages and other data whenever something happens. On the one hand, you need to be in the know, because cyberattacks can occur at any...

6.8AI score
SaveExploits0References6
Rows per page
Query Builder