Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-3876

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00128EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/05/13 1:31 a.m.16 views

CSRF vulnerability in jenkins-reviewbot Plugin

A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptordoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...

6.5CVSS6.6AI score0.00128EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2019/04/15 12:0 a.m.2 views

CloudBees Jenkins jenkins-reviewbot plugin cross-site request forgery vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . jenkins-reviewbot Plugin is used in one o...

6.5CVSS6.8AI score0.00128EPSS
Exploits0References1
NVD
NVD
added 2019/04/04 4:29 p.m.10 views

CVE-2019-10278

A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptordoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...

6.5CVSS6.3AI score0.00128EPSS
Exploits0References3
Prion
Prion
added 2019/04/04 4:29 p.m.12 views

Input validation

A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptordoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

4CVSS6.2AI score0.00045EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2019/04/04 3:38 p.m.26 views

CVE-2019-10278

A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptordoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...

6.5CVSS4.7AI score0.00128EPSS
Exploits0References3
Cvelist
Cvelist
added 2019/04/04 3:38 p.m.15 views

CVE-2019-10279

A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptordoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

6.3AI score0.00045EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2019/04/04 12:0 a.m.2 views

PT-2019-11681 · Jenkins · Jenkins Jenkins-Reviewbot Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins jenkins-reviewbot Plugin affected versions not specified Description: A missing permission check in the ReviewboardDescriptordoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connectio...

6.5CVSS6.2AI score0.00045EPSS
Exploits0References5
Rows per page
Query Builder