CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content...

6.5CVSS6.6AI score0.01414EPSS

Exploits0

OSV•added 2021/02/08 9:15 p.m.•7 views

CVE-2021-26222

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

8.1CVSS8AI score

Exploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by