Lucene search
K

10502 matches found

OSV
OSV
added 2019/02/06 4:29 p.m.9 views

CVE-2019-1003017

A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from a preconfigured other Jenkins instance, potentially installing additional plugins necessary to load the imported job's configuration...

5.3CVSS6.5AI score
Exploits0References1
NVD
NVD
added 2019/02/06 4:29 p.m.12 views

CVE-2019-1003012

A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts, blueocean-core-js/src/js/i18n/i18n.js, blueocean-core-js/src/js/urlconfig.js,...

6.5CVSS6.4AI score0.01108EPSS
Exploits0References3
NVD
NVD
added 2019/02/06 4:29 p.m.6 views

CVE-2019-1003017

A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from a preconfigured other Jenkins instance, potentially installing additional plugins necessary to load the imported job's configuration...

5.3CVSS5.1AI score0.00524EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/02/06 4:0 p.m.17 views

CVE-2019-1003012

A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts, blueocean-core-js/src/js/i18n/i18n.js, blueocean-core-js/src/js/urlconfig.js,...

6.4AI score0.01108EPSS
Exploits0References3
Cvelist
Cvelist
added 2019/02/06 4:0 p.m.12 views

CVE-2019-1003017

A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from a preconfigured other Jenkins instance, potentially installing additional plugins necessary to load the imported job's configuration...

5.1AI score0.00524EPSS
Exploits0References1
CVE
CVE
added 2019/02/06 4:0 p.m.53 views

CVE-2019-1003017

The CVE-2019-1003017 entry concerns Jenkins Job Import Plugin (3.0 and earlier). The vulnerability stems from a data modification flaw in JobImportAction.java that enables attackers to copy jobs from a preconfigured external Jenkins instance, potentially installing additional plugins needed to lo...

5.3CVSS5AI score0.00524EPSS
Exploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2019/02/06 4:0 p.m.17 views

CVE-2019-1003017

A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from a preconfigured other Jenkins instance, potentially installing additional plugins necessary to load the imported job's configuration...

5.3CVSS5AI score0.00524EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:0 a.m.2 views

The vulnerability of the Performance Monitor component of the PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain access to read data or modify data.

The vulnerability of the Performance Monitor component in the PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or delete data usin...

6.5CVSS6.8AI score0.01216EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:0 a.m.3 views

The vulnerability of the UI Infrastructure component of the Oracle Transportation Management software allows a hacker to modify data.

The vulnerability of Oracle Transportation Management’s UI Infrastructure component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

6.8CVSS6.8AI score0.01164EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.5 views

The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data using the HTTP protocol...

8.2CVSS7.5AI score0.01472EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.3 views

The vulnerability of the User Interface sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the User Interface component of the Oracle Marketing component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

8.2CVSS7.6AI score0.0153EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.2 views

The vulnerability of the Partner Dashboard sub-component of the Oracle Partner Management component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Partner Dashboard sub-component of the Oracle Partner Management component within the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP...

8.2CVSS7.5AI score0.0153EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.4 views

The vulnerability of the sub-component “Attachments/File Upload” of the Oracle Application Object Library in the Oracle E-Business Suite system allows a perpetrator to access, modify, add, or delete data.

The vulnerability of the Attachments/File Upload sub-component of the Oracle Application Object Library in the Oracle E-Business Suite system related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete...

8.2CVSS7.5AI score0.02009EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.3 views

The vulnerability of the Partner Dashboard sub-component of the Oracle Partner Management component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Partner Dashboard sub-component of the Oracle Partner Management component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to modify, add, or delete data using th...

8.2CVSS7.5AI score0.02024EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.2 views

The vulnerability of the Oracle Text component of the Oracle Database Server system allows a perpetrator to gain access to modify, add, or delete data, or to cause service failures.

The vulnerability of the Oracle Text component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, delete data, or cause service failures...

8.2CVSS7.5AI score0.01807EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.2 views

The vulnerability of the Partner Detail sub-component of the Oracle Partner Management component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Partner Detail sub-component of the Oracle Partner Management component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

8.2CVSS7.5AI score0.0153EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.2 views

The vulnerability of the Oracle Applications Manager component of the Oracle E-Business Suite, a business automation system that allows attackers to modify, add, or delete data.

The vulnerability of the Oracle Applications Manager component in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP...

8.2CVSS7.5AI score0.02051EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.5 views

The vulnerability of the Partner Detail sub-component of the Oracle Partner Management component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Partner Detail sub-component of the Oracle Partner Management component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

8.2CVSS7.5AI score0.0153EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.5 views

The vulnerability in the web interface of the Oracle iStore component of the Oracle E-Business Suite, a system for automating business operations, allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the web interface of the Oracle iStore component in the Oracle E-Business Suite system for automating business operations is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify,...

8.2CVSS7.5AI score0.02024EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.4 views

The vulnerability of the User Registration sub-component of the Oracle iStore component in the Oracle E-Business Suite, a system for automating business operations in enterprises, allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the User Registration sub-component of the Oracle iStore component in the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP...

8.2CVSS7.5AI score0.0153EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder