CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

634 matches found

Positive Technologies•added 2025/12/18 12:00 a.m.•11 views

PT-2025-52328

Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A stored cross-site scripting issue exists in Kentico Xperience. This allows attackers to inject malicious scripts through the configuration of form validation rules. Successful...

5.4CVSS5.8AI score0.00168EPSS

SaveExploits0References4

Github Security Blog•added 2025/10/29 3:31 p.m.•29 views

Jenkins Publish to Bitbucket Plugin is missing a permissions check

Jenkins Publish to Bitbucket Plugin 0.4 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the...

4.3CVSS6.5AI score0.0025EPSS

SaveExploits0References4Affected Software1

Snyk•added 2025/10/29 3:31 p.m.•12 views

Missing Authorization

Overview org.jenkins-ci.plugins:publish-to-bitbucket is a This plugin publishes the current code to a bitbucket server by creating a new repository and/or project. Creates a Bitbucket repository and associated project from the current code. Features Creates Bitbucket repository based on the curre...

5.4CVSS6.7AI score0.0025EPSS

SaveExploits0References2

OSV•added 2025/10/29 3:31 p.m.•19 views

GHSA-V549-7PM5-F8QR Jenkins Publish to Bitbucket Plugin is missing a permissions check

4.3CVSS6.5AI score0.0025EPSS

SaveExploits0References4

EUVD•added 2025/10/07 12:30 a.m.•28 views

EUVD-2021-0107

Malware in sbrugna...

9.6CVSS9.2AI score0.0266EPSS

SaveExploits1References9

EUVD•added 2025/10/03 8:07 p.m.•23 views

EUVD-2022-3818