Lucene search
+L

61 matches found

Positive Technologies
Positive Technologies
•added 2023/07/12 12:00 a.m.•6 views

PT-2023-26190

Name of the Vulnerable Software and Affected Versions Jenkins External Monitor Job Type Plugin versions 206.v9a 94ff0b 4a 10 and earlier Description The issue allows attackers with Item/Build permission to have Jenkins parse a crafted HTTP request with XML data that uses external entities for...

6.5CVSS0.00612EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/07/12 12:00 a.m.•17 views

Jenkins Plugin External Monitor Job Type 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.8AI score0.00612EPSS
SaveExploits0References3
Jenkins Security Advisories
Jenkins Security Advisories
•added 2023/07/12 12:00 a.m.•23 views

XXE vulnerability in external-monitor-job

external-monitor-job 206.v9a94ff0b4a10 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers with Item/Build permission to have Jenkins parse a crafted HTTP request with XML data that uses external entities for extraction of secrets from t...

7.1CVSS6.6AI score0.00612EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:34 p.m.•47 views

K00265182: Custom monitor privilege escalation vulnerability CVE-2016-5020

Security Advisory Description F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privilege via a crafted external Extended Application Verification EAV monitor script. CVE-2016-5020 Impact An...

9CVSS8.5AI score0.03428EPSS
SaveExploits0Affected Software14
SUSE CVE
SUSE CVE
•added 2023/02/15 6:00 a.m.•19 views

SUSE CVE-2010-0285

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor...

5.6CVSS6.9AI score0.00305EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 6:00 a.m.•13 views

SUSE CVE-2010-0414

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

7.2CVSS7AI score0.00416EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2022/08/10 12:00 a.m.•14 views

The vulnerability of the Jenkins External Monitor Job Type Plugin, related to the manipulation of cross-site requests, allows a hacker to perform a CSRF attack.

The vulnerability of the Jenkins External Monitor Job Type Plugin is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

5CVSS5.2AI score0.00403EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2022/07/27 3:15 p.m.•9 views

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

4.3CVSS5.6AI score0.00403EPSS
SaveExploits0References3
OSV
OSV
•added 2022/07/27 3:15 p.m.•10 views

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

4.3CVSS5.7AI score0.00403EPSS
SaveExploits0References2
NVD
NVD
•added 2022/07/27 3:15 p.m.•34 views

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

4.3CVSS0.00403EPSS
SaveExploits0References2
Prion
Prion
•added 2022/07/27 3:15 p.m.•24 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

4.3CVSS4.6AI score0.00403EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/07/27 2:21 p.m.•134 views

CVE-2022-36886

The CVE-2022-36886 entry concerns a CSRF vulnerability in Jenkins External Monitor Job Type Plugin versions 191.v363d0d1efdf8 and earlier, which allows attackers to create runs of an external job. Root cause: the plugin’s HTTP endpoint does not require POST requests, enabling CSRF. Affected compo...

4.3CVSS4.5AI score0.00403EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/07/27 2:21 p.m.•71 views

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

5.3AI score0.00403EPSS
SaveExploits0References2
Mend
Mend
•added 2022/07/27 2:21 p.m.•3 views

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

5.3CVSS0.00403EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2022/07/27 2:21 p.m.•87 views

CVE-2022-36886

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

4.3CVSS5AI score0.00403EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/27 12:00 a.m.•7 views

PT-2022-4021 · Jenkins · Jenkins External Monitor Job Type Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins External Monitor Job Type Plugin versions 191.v363d0d1efdf8 and earlier Description: A cross-site request forgery CSRF vulnerability in the Jenkins External Monitor Job Type Plugin allows attackers to create runs of an external job...

5CVSS4.5AI score0.00403EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/27 12:00 a.m.•5 views

CVE-2022-36886: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...

4.3CVSS5.5AI score0.00403EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/07/27 12:00 a.m.•13 views

Jenkins Plugin External Monitor Job Type 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is an application software. A cross-site request...

4.3CVSS5AI score0.00403EPSS
SaveExploits0References5
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/07/27 12:00 a.m.•15 views

CSRF vulnerability in external-monitor-job

external-monitor-job 191.v363d0d1efdf8 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to create runs of an external job. external-monitor-job 192.ve979ca8b3ccd requires POST request...

4.3CVSS4.9AI score0.00403EPSS
SaveExploits0Affected Software1
Microsoft KB
Microsoft KB
•added 2022/07/21 12:00 a.m.•18 views

July 21, 2022—KB5015882 (OS Build 22000.832) Preview

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder