Lucene search
K

97 matches found

NVD
NVD
added 2022/06/30 6:15 p.m.9 views

CVE-2022-34783

Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS0.31694EPSS
Exploits0References1
OSV
OSV
added 2022/06/30 6:15 p.m.13 views

CVE-2022-34783

Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.3AI score
Exploits0References1
Prion
Prion
added 2022/06/30 6:15 p.m.13 views

Cross site scripting

Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

3.5CVSS5.3AI score0.31694EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/06/30 5:46 p.m.271 views

CVE-2022-34783

CVE-2022-34783 affects Jenkins Plot Plugin, versions 2.1.10 and earlier. The vulnerability arises because plot descriptions are not escaped, enabling a stored XSS condition that is exploitable by attackers with Item/Configure permission. The Red Hat and other security records reiterate this descr...

5.4CVSS5.4AI score0.31694EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/30 5:46 p.m.15 views

CVE-2022-34783

Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.7AI score0.31694EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/06/30 12:0 a.m.1 views

Jenkins Plugin Plot 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

5.4CVSS5.3AI score0.31694EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/06/30 12:0 a.m.3 views

PT-2022-22334 · Jenkins · Jenkins Plot Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Plot Plugin versions 2.1.10 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because plot descriptions are not properly escaped, allowing attackers with Item/Configure...

8CVSS5AI score0.31694EPSS
Exploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:15 p.m.3 views

Malicious code in sfdc-abstract-plot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 054964122d2a8e86e2c0966558d1ae1e8c3e220bcd91770788fa330bf3ed6364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:15 p.m.7 views

MAL-2022-6045 Malicious code in sfdc-abstract-plot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 054964122d2a8e86e2c0966558d1ae1e8c3e220bcd91770788fa330bf3ed6364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Wired Threat Level
Wired Threat Level
added 2022/05/28 1:0 p.m.12 views

DuckDuckGo Isn’t as Private as You Think

Plus: A $150 million Twitter fine, a massive leak from a Chinese prison in Xinjiang, and an ISIS plot to assassinate George W. Bush...

2.2AI score
Exploits0
Github Security Blog
Github Security Blog
added 2022/05/24 5:28 p.m.18 views

Stored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...

5.4CVSS4.9AI score0.00233EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/05/24 5:28 p.m.12 views

GHSA-F6MG-HMFP-6GRW Stored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...

8CVSS5.3AI score0.00233EPSS
Exploits0References4
Wired Threat Level
Wired Threat Level
added 2022/04/19 9:50 p.m.8 views

The Fake Federal Agents Case Baffling US Intelligence Experts

Guns. Luxury apartments. Duped Secret Service personnel. Did the FBI uncover a foreign plot, or something more ridiculous?...

3.1AI score
Exploits0
OSV
OSV
added 2022/03/30 12:0 a.m.16 views

GHSA-8RX6-V5Q4-XW3J enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the 'Public Coverage / Complexity Scatter Plot' post-build step to have Jenkins parse a crafted...

7.1CVSS7.9AI score0.00164EPSS
Exploits0References4
NVD
NVD
added 2022/03/29 1:15 p.m.6 views

CVE-2022-28154

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS0.00164EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/29 1:15 p.m.1 views

CVE-2022-28154

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS5.9AI score0.00164EPSS
Exploits0References3
CVE
CVE
added 2022/03/29 12:31 p.m.100 views

CVE-2022-28154

CVE-2022-28154 affects the Jenkins Coverage/Complexity Scatter Plot Plugin (version 1.1.1 and earlier). The root cause is that the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks. This can allow an attacker who can provide crafted input files to cause XXE proces...

8.1CVSS7.9AI score0.00164EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.2 views

Jenkins Coverage/Complexity Scatter Plot Plugin 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An XML external entity injection...

8.1CVSS5.8AI score0.00164EPSS
Exploits0References5
ThreatPost
ThreatPost
added 2021/04/12 8:1 p.m.36 views

Man Arrested for AWS Bomb Plot

A Texas man has been charged with plotting a bombing of Amazon Web Services in a quest to allegedly “kill off the internet.” Seth Aaron Pendley was arrested in Ft. Worth after allegedly attempting to get an explosive device from an undercover FBI employee in a sting. The feds were alerted to...

7.2AI score
Exploits0References5
Kitploit
Kitploit
added 2021/01/08 11:30 a.m.33 views

Exif-Gps-Tracer - A Python Script Which Allows You To Parse GeoLocation Data From Your Image Files Stored In A dataset

A python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in HTML Google Maps Prerequisite To run this script fluently , 1 You should have Google Maps API 2 You should enable Map JavaScript API in Console To g...

6.5AI score
Exploits0References1
Rows per page
Query Builder