Lucene search
+L

12 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-1904

Malicious code in bioql PyPI...

4.3CVSS5.2AI score0.00677EPSS
SaveExploits0References5
osv_ghsa
osv_ghsa
•added 2022/05/24 4:59 p.m.•58 views

GHSA-24W5-W6FW-QQX7 Jenkins Global Post Script Plugin missing permission check

Jenkins Global Post Script Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read permission to list the files contained in $JENKINSHOME/global-post-script that can be used by the plugin...

4.3CVSS4.3AI score0.00677EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/05/24 4:59 p.m.•38 views

Jenkins Global Post Script Plugin missing permission check

Jenkins Global Post Script Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read permission to list the files contained in $JENKINSHOME/global-post-script that can be used by the plugin...

4.3CVSS4.9AI score0.00677EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2019/10/23 1:15 p.m.•24 views

CVE-2019-10474

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

4.3CVSS6.6AI score
SaveExploits0References2
NVD
NVD
•added 2019/10/23 1:15 p.m.•23 views

CVE-2019-10474

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

4.3CVSS4.5AI score0.00677EPSS
SaveExploits0References2
Prion
Prion
•added 2019/10/23 1:15 p.m.•23 views

Design/Logic Flaw

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

4CVSS4.4AI score0.00677EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2019/10/23 12:45 p.m.•82 views

CVE-2019-10474

The CVE-2019-10474 entry concerns Jenkins Global Post Script Plugin. A missing permission check allows users with Overall/Read access to list the scripts stored on the Jenkins master file system, exposing file paths (e.g., $JENKINS_HOME/global-post-script) and related configuration data. Multiple...

4.3CVSS4.4AI score0.00677EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/10/23 12:45 p.m.•28 views

CVE-2019-10474

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

4.4AI score0.00677EPSS
SaveExploits0References2
Mend
Mend
•added 2019/10/23 12:45 p.m.•6 views

CVE-2019-10474

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

5.3CVSS0.00677EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2019/10/23 12:00 a.m.•20 views

PT-2019-11868 · Jenkins · Jenkins Global Post Script Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Global Post Script Plugin affected versions not specified Description: The issue is related to a missing permission check in the Jenkins Global Post Script Plugin. This allows users with Overall/Read access to list the scripts availab...

4.3CVSS4.1AI score0.00677EPSS
SaveExploits0References7
Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/10/23 12:00 a.m.•38 views

Missing permission check in global-post-script allowed obtaining configuration data

global-post-script does not perform permission checks on a method implementing form validation. This allows users with Overall/Read permission to list the files contained in $JENKINSHOME/global-post-script that can be used by the plugin. As of publication of this advisory, there is no fix...

4.3CVSS5.1AI score0.00677EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/23 12:00 a.m.•5 views

CVE-2019-10474: Incorrect Default Permissions

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system...

4.3CVSS5.5AI score0.00677EPSS
SaveExploits0References2
Rows per page
Query Builder