Lucene search
K

51 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-2881

Malware in sbrugna...

5CVSS6.1AI score0.01979EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-2882

Malware in sbrugna...

5CVSS6.1AI score0.02993EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-0148

Malware in sbrugna...

5CVSS6.1AI score0.01979EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-5621

Malicious code in bioql PyPI...

5.4CVSS5.9AI score0.01386EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/22 4:3 p.m.10 views

CVE-2020-2281

A cross-site request forgery CSRF vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources...

5.8CVSS6.7AI score0.00669EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 10:24 a.m.8 views

CVE-2019-10339

A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfigurationdoValidateClient allowed users with Overall/Read access to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials...

8.8CVSS6.6AI score0.01832EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.16 views

CVE-2025-23843 WordPress WP-HR Manager plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphrmanager WP-HR Manager: The Human Resources Plugin for WordPress wp-hr-manager allows Reflected XSS.This issue affects WP-HR Manager: The Human Resources Plugin for WordPress: from n/a through =...

7.1CVSS0.00363EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/03/08 12:0 a.m.17 views

Fedora: Security Advisory for maven-filtering (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02557EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2024/03/08 12:0 a.m.15 views

Fedora: Security Advisory for maven-remote-resources-plugin (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02557EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2024/03/08 12:0 a.m.20 views

Fedora: Security Advisory for maven-resources-plugin (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02557EPSS
Exploits3References2
Fedora
Fedora
added 2024/03/07 10:33 p.m.23 views

[SECURITY] Fedora 40 Update: maven-resources-plugin-3.3.1-6.fc40

The Resources Plugin handles the copying of project resources to the output directory...

8.8CVSS6.8AI score0.02557EPSS
Exploits3
Fedora
Fedora
added 2024/03/07 10:33 p.m.22 views

[SECURITY] Fedora 40 Update: maven-filtering-3.3.1-6.fc40

These Plexus components have been built from the filtering process/code in Maven Resources Plugin. The goal is to provide a shared component for all plugins that needs to filter resources...

8.8CVSS6.9AI score0.02557EPSS
Exploits3
Github Security Blog
Github Security Blog
added 2022/05/24 5:29 p.m.15 views

CSRF vulnerability in Jenkins Lockable Resources Plugin

Lockable Resources Plugin 2.8 and earlier does not require POST requests for several HTTP endpoints, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to reserve, unreserve, unlock, and reset resources. Lockable Resources Plugin 2.9 requires POST...

5.8CVSS5.5AI score0.00669EPSS
Exploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/24 4:47 p.m.20 views

Jenkins JX Resources Plugin missing permission check

Jenkins jx-resources Plugin did not perform permission checks on a method implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified Kubernetes server and obtain information about an attacker-specified namespace. Doing so might also le...

8.8CVSS6.3AI score0.01832EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/05/24 4:47 p.m.18 views

GHSA-QWW5-P626-RFPF Jenkins JX Resources Plugin cross-site request forgery vulnerability

Jenkins jx-resources Plugin did not perform permission checks on a method implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified Kubernetes server and obtain information about an attacker-specified namespace. Doing so might also le...

5.4CVSS8.5AI score0.01036EPSS
Exploits0References4
OSV
OSV
added 2022/05/13 1:25 a.m.16 views

GHSA-WQJJ-C9CX-Q7CF Jenkins Lockable Resources Plugin XSS vulnerability

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin...

5.4CVSS5.4AI score0.01386EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2022/05/13 1:25 a.m.19 views

Jenkins Lockable Resources Plugin XSS vulnerability

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin...

5.4CVSS5.9AI score0.01386EPSS
Exploits0References7Affected Software1
OpenVAS
OpenVAS
added 2021/02/11 12:0 a.m.31 views

'/WEB-INF/' Information Disclosure Vulnerability (HTTP)

Various application or web servers / products are prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

5CVSS6.6AI score0.01979EPSS
Exploits0References3
NVD
NVD
added 2020/09/23 2:15 p.m.21 views

CVE-2020-2281

A cross-site request forgery CSRF vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources...

5.8CVSS0.00669EPSS
Exploits0References2
OSV
OSV
added 2020/09/23 2:15 p.m.18 views

CVE-2020-2281

A cross-site request forgery CSRF vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources...

5.4CVSS6.7AI score
Exploits0References2
Rows per page
Query Builder