Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-12770

Malicious code in bioql PyPI...

6CVSS4.8AI score0.01436EPSS
Exploits1References4
Prion
Prion
added 2023/01/17 11:15 p.m.45 views

Integer overflow

Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a .gitattributes file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this...

7.5CVSS9.6AI score0.09438EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/27 3:15 p.m.3 views

CVE-2022-36915

Jenkins Android Signing Plugin 2.2.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace...

4.3CVSS5.8AI score0.00064EPSS
Exploits0References3
NVD
NVD
added 2022/07/27 3:15 p.m.9 views

CVE-2022-36915

Jenkins Android Signing Plugin 2.2.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace...

4.3CVSS0.00064EPSS
Exploits0References2
OSV
OSV
added 2022/07/27 3:15 p.m.9 views

CVE-2022-36893

Jenkins rpmsign-plugin Plugin 0.5.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace...

4.3CVSS4.5AI score
Exploits0References2
NVD
NVD
added 2022/07/27 3:15 p.m.12 views

CVE-2022-36892

Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace...

4.3CVSS0.00064EPSS
Exploits0References2
Prion
Prion
added 2022/07/27 3:15 p.m.11 views

Design/Logic Flaw

Jenkins Android Signing Plugin 2.2.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace...

4CVSS4.5AI score0.00064EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/07/27 2:23 p.m.13 views

CVE-2022-36892

Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace...

5.2AI score0.00064EPSS
Exploits0References2
OSV
OSV
added 2021/03/18 2:15 p.m.19 views

CVE-2021-21626

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

4.3CVSS6.5AI score
Exploits0References2
AlpineLinux
AlpineLinux
added 2021/03/18 1:35 p.m.22 views

CVE-2021-21626

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

4.3CVSS4.9AI score0.00031EPSS
Exploits0References2
Metasploit
Metasploit
added 2012/06/21 6:25 a.m.62 views

Windows Gather Generic File Collection

This module downloads files recursively based on the FILEGLOBS option. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Generic File Collection', 'Description' = %q This module...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2011/05/06 12:0 a.m.34 views

SuSE 10 Security Update : vsftpd (ZYPP Patch Number 7373)

Certain file patterns could cause vsftpd to consume excessive CPU resulting in denial of service CVE-2011-0762. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

4CVSS6.2AI score0.45278EPSS
Exploits9References2
Rows per page
Query Builder