Lucene search
+L

12 matches found

OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-35900 Malicious code in test-mlw2-odism-mossy-lamps-azide (npm)

The package test-mlw2-odism-mossy-lamps-azide was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in test-mlw2-odism-mossy-lamps-azide (npm)

The package test-mlw2-odism-mossy-lamps-azide was found to contain malicious code...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 11:42 p.m.•8 views

CVE-2022-41242

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps...

5.4CVSS5.2AI score0.0055EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/09/22 12:00 a.m.•48 views

Jenkins extreme-feedback Plugin vulnerable to Missing Authorization

Jenkins extreme-feedback Plugin 1.7 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps. As of publicati...

5.4CVSS5.2AI score0.0055EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/09/22 12:00 a.m.•65 views

GHSA-MRF6-4GW6-65V3 Jenkins extreme-feedback Plugin vulnerable to Missing Authorization

Jenkins extreme-feedback Plugin 1.7 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps. As of publicati...

5.4CVSS5.5AI score0.0055EPSS
SaveExploits0References3
NVD
NVD
•added 2022/09/21 4:15 p.m.•43 views

CVE-2022-41242

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps...

5.4CVSS0.0055EPSS
SaveExploits0References1
OSV
OSV
•added 2022/09/21 4:15 p.m.•12 views

CVE-2022-41242

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps...

5.4CVSS5.8AI score0.0055EPSS
SaveExploits0References1
Prion
Prion
•added 2022/09/21 4:15 p.m.•25 views

Information disclosure

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps...

5.5CVSS5.1AI score0.0055EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/21 12:00 a.m.•0 views

CVE-2022-41242: Missing Authorization

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps...

5.4CVSS6AI score0.0055EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•10 views

Jenkins extreme-feedback Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

5.4CVSS5.8AI score0.0055EPSS
SaveExploits0References3
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/09/21 12:00 a.m.•16 views

Missing permission check in extreme-feedback

extreme-feedback 1.7 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps. As of publication of this...

5.4CVSS5.6AI score0.0055EPSS
SaveExploits0Affected Software1
Openbugbounty
Openbugbounty
•added 2017/06/18 6:05 a.m.•14 views

wildwoodlamps.com XSS vulnerability

Open Bug Bounty ID: OBB-249681 Description| Value ---|--- Affected Website:| wildwoodlamps.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Rows per page
Query Builder