CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

180 matches found

Rapid7 Vulnerability Database (full)•added 2020/03/09 12:00 a.m.•3 views

CVE-2020-2136: Improper Neutralization of Input During Web Page Generation

Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability...

5.4CVSS6.3AI score0.00853EPSS

SaveExploits0References2

Gitee•added 2020/02/25 7:21 p.m.•12 views

Exploit for Incorrect Authorization in Jenkins Git

CVE-2018-1000110: User and Node Enumeration Through Jenkins Git Plugin v3.7 Description: An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users. Versions...

5.3CVSS6.9AI score0.03914EPSS

SaveExploits2

Prion•added 2019/02/06 4:29 p.m.•37 views

Cross site request forgery (csrf)

A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record...

4.3CVSS4.4AI score0.01145EPSS

SaveExploits0References3Affected Software2

OSV•added 2019/02/06 4:29 p.m.•24 views

CVE-2019-1003010

4.3CVSS6.4AI score

SaveExploits0References3

NVD•added 2019/02/06 4:29 p.m.•85 views

CVE-2019-1003010

4.3CVSS4.4AI score0.01145EPSS

SaveExploits0References3

CVE•added 2019/02/06 4:00 p.m.•115 views

CVE-2019-1003010

The CVE-2019-1003010 entry concerns Jenkins Git Plugin (versions 3.9.1 and earlier). The issue is a cross-site request forgery in src/main/java/hudson/plugins/git/GitTagAction.java that lets an attacker create a Git tag in a workspace and attach metadata to a build record. The documents do not sp...

4.3CVSS4.3AI score0.01145EPSS

SaveExploits0References3Affected Software1

AlpineLinux•added 2019/02/06 4:00 p.m.•138 views

CVE-2019-1003010

4.3CVSS5.1AI score0.01145EPSS

SaveExploits0References3

Cvelist•added 2019/02/06 4:00 p.m.•82 views

CVE-2019-1003010

4.8AI score0.01145EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2019/02/06 12:00 a.m.•3 views

CVE-2019-1003010: Cross-Site Request Forgery (CSRF)

4.3CVSS8.1AI score0.01145EPSS

SaveExploits0References2

Jenkins Security Advisories•added 2019/01/28 12:00 a.m.•13 views

CSRF vulnerability in Git Plugin

Git Plugin allows the creation of a tag in a job workspace's Git repository with accompanying metadata attached to a build record. The HTTP endpoint to create the tag did not require POST requests, resulting in a CSRF vulnerability. The HTTP endpoint to create the tag now requires that requests a...

4.3CVSS6.1AI score0.01145EPSS

SaveExploits0Affected Software1

CNVD•added 2018/06/07 12:00 a.m.•19 views

CloudBees Jenkins Git Plugin Multiple File Server-Side Request Forgery Vulnerability

CloudBees Jenkins is the U.S. CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Git Plugin is used in one of the version control plugin . A...

6.4CVSS6.6AI score0.00809EPSS

SaveExploits0References1

RedhatCVE•added 2018/06/06 2:51 p.m.•41 views

CVE-2018-1000182

A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, ViewGitWeb.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a...

6.4CVSS5.5AI score0.00809EPSS

SaveExploits0References2

NVD•added 2018/06/05 8:29 p.m.•40 views

CVE-2018-1000182

6.4CVSS6.3AI score0.00809EPSS

SaveExploits0References1

OSV•added 2018/06/05 8:29 p.m.•38 views

CVE-2018-1000182

6.4CVSS6.5AI score

SaveExploits0References1

Prion•added 2018/06/05 8:29 p.m.•29 views

Server side request forgery (ssrf)

5.5CVSS6.2AI score0.00809EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2018/06/05 8:00 p.m.•48 views

CVE-2018-1000182

6.6AI score0.00809EPSS

SaveExploits0References1

CVE•added 2018/06/05 8:00 p.m.•109 views

CVE-2018-1000182

A server-side request forgery (SSRF) vulnerability exists in Jenkins Git Plugin 3.9.0 and older. In AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, and ViewGitWeb.java, attackers with Overall/Read access can cause Jenkins to send a GET request to a...

6.4CVSS6.2AI score0.00809EPSS

SaveExploits0References1Affected Software1

AlpineLinux•added 2018/06/05 8:00 p.m.•97 views

CVE-2018-1000182

6.4CVSS5.5AI score0.00809EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2018/06/05 12:00 a.m.•2 views

CVE-2018-1000182: Server-Side Request Forgery (SSRF)

6.4CVSS6.9AI score0.00809EPSS

SaveExploits0References2

Jenkins Security Advisories•added 2018/06/04 12:00 a.m.•14 views

Server-side request forgery vulnerability in Git Plugin

Various form validation methods in Git Plugin did not check the permission of the user accessing them, allowing anyone with Overall/Read access to Jenkins to cause Jenkins to send a GET request to a specified URL. Additionally, these form validation methods did not require POST requests, resultin...

6.4CVSS6.9AI score0.00809EPSS

SaveExploits0Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by