CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2818 matches found

OSV•added 2020/04/16 7:15 p.m.•15 views

CVE-2020-2178

Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS6.7AI score

SaveExploits0References2

NVD•added 2020/04/16 7:15 p.m.•22 views

CVE-2020-2178

Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS6.9AI score0.00877EPSS

SaveExploits0References2

AlpineLinux•added 2020/04/16 1:35 p.m.•53 views

CVE-2020-2178

Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS3.9AI score0.00877EPSS

SaveExploits0References2

Cvelist•added 2020/04/16 1:35 p.m.•24 views

CVE-2020-2178

Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

6.9AI score0.00877EPSS

SaveExploits0References2

CVE•added 2020/04/16 1:35 p.m.•88 views

CVE-2020-2178

What’s affected: Jenkins Parasoft Findings Plugin (versions 10.4.3 and earlier) used in Jenkins. Root cause: The plugin’s XML parser is not configured to disable XML external entities (XXE) attacks. Impact: An attacker who can control input to the Parasoft Findings parser could cause the parser t...

7.1CVSS6.8AI score0.00877EPSS

SaveExploits0References2Affected Software1

NVD•added 2020/04/07 1:15 p.m.•28 views

CVE-2020-2172

Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

6.5CVSS6.6AI score0.01067EPSS

SaveExploits0References2

Prion•added 2020/04/07 1:15 p.m.•28 views

Xxe

Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

4CVSS6.5AI score0.01067EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2020/04/07 12:25 p.m.•41 views

CVE-2020-2172

Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

6.5AI score0.01067EPSS

SaveExploits0References2

RedhatCVE•added 2020/03/31 7:37 a.m.•34 views

CVE-2020-2138

Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS4.3AI score0.00926EPSS

SaveExploits0References4

OSV•added 2020/03/25 5:15 p.m.•13 views

CVE-2020-2171

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.8CVSS6.7AI score

SaveExploits0References2

NVD•added 2020/03/25 5:15 p.m.•43 views

CVE-2020-2171

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.8CVSS8.7AI score0.0115EPSS

SaveExploits0References2

CVE•added 2020/03/25 4:05 p.m.•84 views

CVE-2020-2171

CVE-2020-2171 affects the Jenkins RapidDeploy Plugin (versions 4.2 and earlier). The root cause is a configured XML parser that does not disable XML external entity (XXE) processing, enabling an attacker to craft input files that may lead to secret extraction, server-side impacts, or DoS through ...

8.8CVSS8.6AI score0.0115EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2020/03/25 4:05 p.m.•44 views

CVE-2020-2171

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.7AI score0.0115EPSS

SaveExploits0References2

AlpineLinux•added 2020/03/25 4:05 p.m.•95 views

CVE-2020-2171

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.8CVSS3.8AI score0.0115EPSS

SaveExploits0References2

Veracode•added 2020/03/24 6:07 a.m.•18 views

XML External Entity (XXE)

AutoUpdater.NET is vulnerable to XML External Entity XXE. The vulnerability exists as the XML parser used in AutoUpdater does not properly restrict resolving XML external entities...

9.8CVSS4.4AI score0.0234EPSS

SaveExploits1References3Affected Software1

IBM Security Bulletins•added 2020/03/23 8:41 p.m.•30 views

Security Bulletin: Open Source Apache Xerces-C XML parser vulnerabilities affect IBM Integration Bus and WebSphere Message Broker (CVE-2016-4463, CVE-2016-0729)

Summary IBM Integration Bus and WebSphere Message Broker are affected by Open Source Apache Xerces-C XML parser vulnerabilities. Vulnerability Details CVEID: CVE-2016-0729 DESCRIPTION: Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by improper bounds checking duri...

9.8CVSS0.5AI score0.14138EPSS

SaveExploits0Affected Software2

NVD•added 2020/03/09 4:15 p.m.•30 views

CVE-2020-2144

Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS6.9AI score0.01081EPSS

SaveExploits0References2

OSV•added 2020/03/09 4:15 p.m.•26 views

CVE-2020-2144

Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS6.7AI score

SaveExploits0References2

OSV•added 2020/03/09 4:15 p.m.•23 views

CVE-2020-2138

Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS6.7AI score

SaveExploits0References2

Prion•added 2020/03/09 4:15 p.m.•20 views

Xxe

Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

5.5CVSS6.8AI score0.00926EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by