CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

45 matches found

Rapid7 Vulnerability Database (full)•added 2022/06/22 12:00 a.m.•8 views

CVE-2022-34182: Improper Neutralization of Input During Web Page Generation

Jenkins Nested View Plugin 1.20 through 1.25 both inclusive does not escape search parameters, resulting in a reflected cross-site scripting XSS vulnerability...

6.1CVSS6.3AI score0.00986EPSS

SaveExploits0References2

Jenkins Security Advisories•added 2022/06/22 12:00 a.m.•18 views

Reflected XSS vulnerability in nested-view

nested-view 1.20 through 1.25 both inclusive does not escape search parameters. This results in a reflected cross-site scripting XSS vulnerability. nested-view 1.26 escapes search parameters...

8.8CVSS5.8AI score0.00986EPSS

SaveExploits0Affected Software1

Positive Technologies•added 2022/06/22 12:00 a.m.•13 views

PT-2022-22050 · Jenkins · Jenkins Nested View Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Nested View Plugin versions 1.20 through 1.25 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This occurs because the plugin does not escape search parameters. No information is provided about...

8.8CVSS5.9AI score0.00986EPSS

SaveExploits0References6

CNNVD•added 2022/06/22 12:00 a.m.•19 views

Jenkins Plugin Nested View Cross-site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. An attacker could exploit this vulnerability to perform cross-site scripting...

6.1CVSS5.9AI score0.00986EPSS

SaveExploits0References4

vulnersOsv•added 2022/05/24 7:19 p.m.•3 views

javagh.jenkins:mashup-portlets-plugin (>=0.9, <=1.0.3), org.jenkins-ci.main:jenkins-test-harness (1.526) +10 more potentially affected by CVE-2021-21687 via org.jenkins-ci.main:jenkins-core (1.526)

org.jenkins-ci.main:jenkins-core MAVEN version 1.526 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - javagh.jenkins:mashup-portlets-plugin =0.9, =4.2.2, =1.0.1, =1.12, =1.526, =0.5, =1.4, =1.9.1...

9.1CVSS0.01425EPSS

SaveExploits0

Github Security Blog•added 2022/05/24 7:12 p.m.•40 views

XXE vulnerability in Jenkins Nested View Plugin

Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity XXE attacks. This allows attackers able to configure views to have Jenkins parse a crafted view XML definition that uses external entities for extraction of secrets from the Jenkins...

7.1CVSS6.6AI score0.01321EPSS

SaveExploits0References5Affected Software1

osv_ghsa•added 2022/05/24 7:12 p.m.•77 views

GHSA-5WC4-W63V-97C3 XXE vulnerability in Jenkins Nested View Plugin

7.1CVSS7AI score0.01321EPSS

SaveExploits0References5

vulnersOsv•added 2022/05/24 5:23 p.m.•4 views

javagh.jenkins:mashup-portlets-plugin (>=0.9, <=1.0.3), org.jenkins-ci.main:jenkins-test-harness (1.526) +10 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.526)

5.4CVSS0.01126EPSS

SaveExploits0

vulnersOsv•added 2022/05/24 4:50 p.m.•4 views

javagh.jenkins:mashup-portlets-plugin (>=0.9, <=1.0.3), org.jenkins-ci.main:jenkins-test-harness (1.526) +10 more potentially affected by CVE-2019-10352 via org.jenkins-ci.main:jenkins-core (1.526)

6.5CVSS0.10225EPSS

SaveExploits1

vulnersOsv•added 2022/05/14 3:44 a.m.•3 views

com.deepshiftlabs.nerrvana:nerrvana-plugin (>=1.02.03, <=1.02.05), net.praqma:drmemory-plugin (>=0.1.0, <=0.1.1) +11 more potentially affected by CVE-2017-1000356 via org.jenkins-ci.main:jenkins-core (1.450)

org.jenkins-ci.main:jenkins-core MAVEN version 1.450 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.deepshiftlabs.nerrvana:nerrvana-plugin =1.02.03, =0.1.0, =1.0, =0.3, =1.02r, =1.10, =1.3,...

8.8CVSS0.06957EPSS

SaveExploits1

vulnersOsv•added 2022/05/14 1:04 a.m.•3 views

javagh.jenkins:mashup-portlets-plugin (>=0.9, <=1.0.3), org.jenkins-ci.main:jenkins-test-harness (1.526) +10 more potentially affected by CVE-2018-1000170 via org.jenkins-ci.main:jenkins-core (1.526)

5.4CVSS0.00867EPSS

SaveExploits0

vulnersOsv•added 2022/05/14 1:04 a.m.•3 views

javagh.jenkins:mashup-portlets-plugin (>=0.9, <=1.0.3), org.jenkins-ci.main:jenkins-test-harness (1.526) +10 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.526)

4.3CVSS0.0131EPSS

SaveExploits0

vulnersOsv•added 2022/05/14 1:04 a.m.•3 views

com.deepshiftlabs.nerrvana:nerrvana-plugin (>=1.02.03, <=1.02.05), net.praqma:drmemory-plugin (>=0.1.0, <=0.1.1) +11 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.450)

4.3CVSS0.0131EPSS

SaveExploits0

vulnersOsv•added 2022/05/14 1:04 a.m.•4 views

javagh.jenkins:mashup-portlets-plugin (>=0.9, <=1.0.3), org.jenkins-ci.main:jenkins-test-harness (1.526) +10 more potentially affected by CVE-2017-1000398 via org.jenkins-ci.main:jenkins-core (1.526)

4.3CVSS0.01008EPSS

SaveExploits0

osv_cve•added 2021/08/31 2:15 p.m.•33 views

CVE-2021-21680