Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2024/01/09 9:30 a.m.34 views

Qualys Jenkins Plugin for WAS XML External Entity vulnerability

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...

6.5CVSS7AI score0.00457EPSS
Exploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2024/01/09 9:30 a.m.24 views

Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

6.5CVSS7AI score0.00547EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2024/01/09 9:30 a.m.16 views

GHSA-8525-52VG-JV6V Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

5.7CVSS6.1AI score0.00547EPSS
Exploits0References6
Prion
Prion
added 2024/01/09 9:15 a.m.14 views

Design/Logic Flaw

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...

4CVSS7AI score0.00457EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/01/09 8:15 a.m.12 views

CVE-2023-6147

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

6.5CVSS5.9AI score0.00547EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/09 8:8 a.m.10 views

CVE-2023-6147 Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

5.7CVSS6.1AI score0.00547EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/01/09 8:8 a.m.15 views

CVE-2023-6147 Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

5.7CVSS6.8AI score0.00547EPSS
Exploits0References2
Kitploit
Kitploit
added 2016/04/06 10:30 p.m.30 views

Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands

Brosec is a terminal based reference utility designed to help us infosec bros and broettes with useful yet sometimes complex payloads and commands that are often used during work as infosec practitioners. An example of one of Brosec's most popular use cases is the ability to generate on the fly...

7.4AI score
Exploits0References2
Rows per page
Query Builder