Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 11:59 a.m.•17 views

CVE-2018-19203

PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request...

7.5CVSS7.3AI score0.02805EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/07 12:00 a.m.•20 views

The vulnerability of the Jenkins automation server’s monitor-remote-job plugin, related to deficiencies in access control, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server’s “monitor-remote-job” plugin is related to deficiencies in access control, resulting from passwords being stored publicly in the config.xml file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protecte...

6.5CVSS5.4AI score0.00282EPSS
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2025/04/02 3:43 p.m.•6 views

Cleartext Storage of Sensitive Information

Overview org.ukiuni.monitor-remote-job-plugin:monitor-remote-job is a monitor remote job. Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information within config.xml files. An attacker can gain unauthorized access to sensitive data by exploiting the visibility...

5.5CVSS7AI score0.00282EPSS
SaveExploits0References2
OSV
OSV
•added 2025/04/02 3:16 p.m.•16 views

CVE-2025-31725

Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

5.5CVSS5.8AI score0.00282EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/02 2:59 p.m.•91 views

CVE-2025-31725

The Jenkins monitor-remote-job Plugin 1.0 is vulnerable to Cleartext Storage of Sensitive Information due to deficient access controls. The plugin stores passwords unencrypted within the config.xml files on the Jenkins controller. This flaw allows users with Extended Read permissions, or any acto...

5.5CVSS7AI score0.00282EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2025/04/02 2:59 p.m.•3 views

CVE-2025-31725

Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

5.5CVSS0.00282EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/02 12:00 a.m.•19 views

Jenkins plugin monitor-remote-job 访问控制错误漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

5.5CVSS6.5AI score0.00282EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/02 12:00 a.m.•14 views

PT-2025-14515 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins monitor-remote-job Plugin version 1.0 Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins controller. These passwords can be viewed by users with Extended Read permission or those wh...

6.5CVSS6AI score0.00282EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/02 12:00 a.m.•3 views

CVE-2025-31725: Improper Access Control

Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

5.5CVSS6AI score0.00282EPSS
SaveExploits0References1
Jenkins Security Advisories
Jenkins Security Advisories
•added 2025/04/02 12:00 a.m.•15 views

Passwords stored in plain text by monitor-remote-job

monitor-remote-job 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These passwords can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. As of publication of this advisory, there ...

5.5CVSS5.6AI score0.00282EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/06 4:27 a.m.•36 views

CVE-2021-31474

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results...

10CVSS7.3AI score0.93939EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2018/11/21 12:00 a.m.•23 views

CVE-2018-19410

PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges including administrator. A remote unauthenticated user can craft an HTTP request and override attributes of the ‘include’ directive in /public/login.htm and perform a Local...

9.8CVSS7.1AI score0.97939EPSS
SaveIn wildExploits0References3
Rows per page
Query Builder