CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2019/06/11 2:29 p.m.•18 views

CVE-2019-10339

A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfigurationdoValidateClient allowed users with Overall/Read access to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials...

8.8CVSS8.6AI score0.01798EPSS

SaveExploits0References3

Mend•added 2019/06/11 1:15 p.m.•3 views

CVE-2019-10339

8.8CVSS0.01798EPSS

SaveExploits0References6

Mend•added 2019/06/11 1:15 p.m.•4 views

CVE-2019-10338

A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfigurationdoValidateClient allowed attackers to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials...

8.8CVSS0.01036EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2019/06/11 12:00 a.m.•9 views

CVE-2019-10338: Cross-Site Request Forgery (CSRF)

8.8CVSS5.8AI score0.01036EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by