Lucene search
+L

149 matches found

Mend
Mend
•added 2022/03/29 12:30 p.m.•9 views

CVE-2022-28134

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers...

5.5CVSS0.00668EPSS
SaveExploits0References4
Mend
Mend
•added 2022/03/29 12:30 p.m.•9 views

CVE-2022-28133

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to create BitBucket Server consumers...

5.4CVSS0.00824EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•8 views

CVE-2022-28134: Missing Authorization

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers...

5.5CVSS6AI score0.00668EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•9 views

CVE-2022-28133: Improper Neutralization of Input During Web Page Generation

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to create BitBucket Server consumers...

5.4CVSS5.9AI score0.00824EPSS
SaveExploits0References2
Elastic
Elastic
•added 2021/12/07 5:00 p.m.•27 views

Enterprise Search 7.16.0 Security Update

Enterprise Search Information Disclosure issue ESA-2021-28 An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the...

6.8CVSS6.1AI score0.00762EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/07 12:00 a.m.•7 views

CVE-2021-37940: Server-Side Request Forgery (SSRF)

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly...

6.8CVSS5.8AI score0.00762EPSS
SaveExploits0References3
Fedora
Fedora
•added 2021/04/16 2:44 p.m.•52 views

[SECURITY] Fedora 32 Update: clamav-0.103.2-1.fc32

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

1.9AI score
SaveExploits0
Fedora
Fedora
•added 2021/03/20 12:21 a.m.•59 views

[SECURITY] Fedora 34 Update: gnome-calendar-40~rc-1.fc34

Calendar is a simple and beautiful calendar application designed to fit GNOME 3. Features: Week, month and year views Basic editing of events Evolution Data Server integration Search support...

5.5CVSS7AI score0.00639EPSS
SaveExploits1
NVD
NVD
•added 2021/02/03 4:15 p.m.•39 views

CVE-2021-25772

In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration...

5.3CVSS0.01025EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/02/03 4:15 p.m.•23 views

CVE-2021-25772

In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration...

5.3CVSS5.8AI score0.01025EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/02/03 4:15 p.m.•11 views

CVE-2021-25772

In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration...

5.3CVSS5.7AI score0.01025EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/02/03 3:33 p.m.•37 views

CVE-2021-25772

In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration...

6.7AI score0.01025EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/03 12:00 a.m.•5 views

CVE-2021-25772: Undefined Security Weakness

In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration...

5.3CVSS5.7AI score0.01025EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/03 12:00 a.m.•24 views

JetBrains TeamCity security vulnerabilities

Jetbrains JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains Jetbrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exist...

5.3CVSS5.8AI score0.01025EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/03 12:00 a.m.•2 views

PT-2021-16784

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2020.2.2 Description The issue allows for a Denial of Service DoS attack on the TeamCity server via server integration. No information is provided about the estimated number of potentially affected devices...

5.3CVSS5.7AI score0.01025EPSS
SaveExploits0References6
Fedora
Fedora
•added 2020/05/23 3:22 a.m.•91 views

[SECURITY] Fedora 30 Update: clamav-0.102.3-1.fc30

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

7.5CVSS7.8AI score0.05063EPSS
SaveExploits0
Fedora
Fedora
•added 2019/04/02 12:03 a.m.•20 views

[SECURITY] Fedora 30 Update: clamav-0.101.2-1.fc30

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

1.9AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2019/01/25 4:18 p.m.•2 views

cloud.altemista.fwk.integration:cloud-altemistafwk-core-integration-ws-conf (>=3.0.0.release, <=3.0.1.release), com.themodernway:themodernway-server-integration (>=2.0.0-rc1, <=2.2.6-release) potentially affected by CVE-2019-3772 via org.springframework.integration:spring-integration-ws (>=5.0.1.release, <=5.0.7.release)

org.springframework.integration:spring-integration-ws MAVEN version =5.0.1.release, =3.0.0.release, =2.0.0-rc1, =2.2.6-release Source cves: CVE-2019-3772 Source advisory: GHSA-WR5R-M8PC-85J9...

9.8CVSS0.03002EPSS
SaveExploits0
Packet Storm
Packet Storm
•added 2017/06/29 12:00 a.m.•104 views

Kaspersky Anti-Virus File Server 8.0.3.297 XSS / CSRF / Code Execution

Advisory Information Title: Kaspersky Anti-Virus File Server Multiple Vulnerabilities Advisory ID: CORE-2017-0003 Advisory URL: http://www.coresecurity.com/advisories/Kaspersky-Anti-Virus-File-Server-Multiple-Vulnerabilities Date published: 2017-06-28 Date of last update: 2017-06-28 Vendors...

0.2AI score0.11265EPSS
SaveExploits8
zdt
zdt
•added 2017/06/29 12:00 a.m.•80 views

Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities

Exploit for linux platform in category web applications 1. Advisory Information Title: Kaspersky Anti-Virus File Server Multiple Vulnerabilities Advisory ID: CORE-2017-0003 Advisory URL: http://www.coresecurity.com/advisories/Kaspersky-Anti-Virus-File-Server-Multiple-Vulnerabilities Date publishe...

10CVSS7.9AI score0.11265EPSS
SaveExploits8
Rows per page
Query Builder