Lucene search
+L

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-1874

Malicious code in bioql PyPI...

6.5CVSS5.7AI score0.00452EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-1703

Malicious code in bioql PyPI...

6.5CVSS5.7AI score0.00658EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2023/07/04 5:17 a.m.21 views

CVE-2023-35149

A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

4.2CVSS6.6AI score0.00658EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2023/07/04 5:17 a.m.16 views

CVE-2023-35148

A cross-site request forgery CSRF vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

4.2CVSS6.7AI score0.00452EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/06/16 12:0 a.m.50 views

Jenkins plugins Multiple Vulnerabilities (2023-06-14)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default. CVE-2023-3514...

8.1CVSS6.2AI score0.0083EPSS
Exploits0References11
Github Security Blog
Github Security Blog
added 2023/06/14 3:30 p.m.24 views

Jenkins Digital.ai App Management Publisher Plugin vulnerable to Cross-Site Request Forgery

Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method,...

6.5CVSS6.5AI score0.00452EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/06/14 1:15 p.m.27 views

Information disclosure

A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

4CVSS6.2AI score0.00658EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/06/14 12:53 p.m.53 views

CVE-2023-35148

A cross-site request forgery CSRF vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

7AI score0.00452EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/06/14 12:0 a.m.4 views

Jenkins Plugin Digital.ai App Management Publisher 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS5.9AI score0.00452EPSS
Exploits0References3
Rows per page
Query Builder