Lucene search
K

12 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-7349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable...

6.1CVSS7AI score0.0024EPSS
Exploits1References2
OSV
OSV
added 2024/03/06 6:30 p.m.21 views

GHSA-5J5R-6MV9-M255 Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.4AI score0.38903EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/03/06 6:30 p.m.27 views

Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.5AI score0.38903EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/03/06 5:15 p.m.12 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.5AI score0.38903EPSS
Exploits0References2
Prion
Prion
added 2024/03/06 5:15 p.m.28 views

Cross site scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.38903EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/06 5:1 p.m.17 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.38903EPSS
Exploits0References2
CVE
CVE
added 2024/03/06 5:1 p.m.71 views

CVE-2024-28156

CVE-2024-28156 affects Jenkins Build Monitor View Plugin (versions ≤ 1.14-860.vd06ef2568b_3f). The root cause is that Build Monitor View names are not escaped, which enables stored cross-site scripting (XSS) when an attacker can configure Build Monitor Views. Multiple sources corroborate: Red Hat...

5.4CVSS5.3AI score0.38903EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/03/06 5:1 p.m.17 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.38903EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.2 views

Jenkins Build Monitor View Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

5.4CVSS5.6AI score0.38903EPSS
Exploits0References2
OSV
OSV
added 2019/02/04 7:29 p.m.1 views

UBUNTU-CVE-2019-7326

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console console.php because proper filtration is omitted. This relates to the index.php?view=monitor Host Name...

6.1CVSS7AI score0.0024EPSS
Exploits1References4
OSV
OSV
added 2019/02/04 7:29 p.m.0 views

UBUNTU-CVE-2019-7343

Reflected - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitorMethod' parameter value in the view monitor monitor.php because proper filtration is omitted...

6.1CVSS7.4AI score0.00262EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2019/02/04 12:0 a.m.3 views

PT-2019-18531 · Zoneminder +3 · Zoneminder +3

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.4 Description: A Self-Stored Cross Site Scripting XSS issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable Host parameter value in the view console console.php, specifically...

9.8CVSS6.3AI score0.70724EPSS
Exploits46References111
Rows per page
Query Builder