Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-1904

Malicious code in bioql PyPI...

4.3CVSS4.8AI score0.00031EPSS
Exploits0References5
OSV
OSV
added 2022/05/24 4:59 p.m.19 views

GHSA-24W5-W6FW-QQX7 Jenkins Global Post Script Plugin missing permission check

Jenkins Global Post Script Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read permission to list the files contained in $JENKINSHOME/global-post-script that can be used by the plugin...

4.3CVSS4.3AI score0.00031EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/24 4:59 p.m.12 views

Jenkins Global Post Script Plugin missing permission check

Jenkins Global Post Script Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read permission to list the files contained in $JENKINSHOME/global-post-script that can be used by the plugin...

4.3CVSS4.9AI score0.00031EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2019/10/23 1:15 p.m.13 views

CVE-2019-10474

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

4.3CVSS6.6AI score
Exploits0References2
NVD
NVD
added 2019/10/23 1:15 p.m.6 views

CVE-2019-10474

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

4.3CVSS4.5AI score0.00031EPSS
Exploits0References2
Prion
Prion
added 2019/10/23 1:15 p.m.11 views

Design/Logic Flaw

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

4CVSS4.4AI score0.00031EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/10/23 12:45 p.m.8 views

CVE-2019-10474

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

4.4AI score0.00031EPSS
Exploits0References2
CVE
CVE
added 2019/10/23 12:45 p.m.50 views

CVE-2019-10474

The CVE-2019-10474 entry concerns Jenkins Global Post Script Plugin. A missing permission check allows users with Overall/Read access to list the scripts stored on the Jenkins master file system, exposing file paths (e.g., $JENKINS_HOME/global-post-script) and related configuration data. Multiple...

4.3CVSS4.4AI score0.00031EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2019/10/23 12:0 a.m.4 views

PT-2019-11868 · Jenkins · Jenkins Global Post Script Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Global Post Script Plugin affected versions not specified Description: The issue is related to a missing permission check in the Jenkins Global Post Script Plugin. This allows users with Overall/Read access to list the scripts availab...

4.3CVSS4.1AI score0.00031EPSS
Exploits0References7
Rows per page
Query Builder