Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
JenkinsJenkins1.532.1

11 matches found

CVE
CVE•added 2014/10/17 3:55 p.m.•71 views

CVE-2014-2064

The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts.

5CVSS9.1AI score0.00382EPSS
CVE
CVE•added 2014/10/17 3:55 p.m.•71 views

CVE-2014-2066

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies.

6.8CVSS9.1AI score0.00151EPSS
CVE
CVE•added 2014/10/17 3:55 p.m.•65 views

CVE-2014-2065

Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.

4.3CVSS7.7AI score0.0011EPSS
CVE
CVE•added 2014/03/01 12:1 a.m.•59 views

CVE-2014-2059

Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.

6.5CVSS6.3AI score0.02822EPSS
CVE
CVE•added 2014/10/17 3:55 p.m.•59 views

CVE-2014-2061

The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.

5CVSS9.1AI score0.00209EPSS
CVE
CVE•added 2014/03/01 12:1 a.m.•58 views

CVE-2014-2067

Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."

3.5CVSS5.3AI score0.00094EPSS
CVE
CVE•added 2014/10/17 3:55 p.m.•54 views

CVE-2014-2058

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.

6.5CVSS9.2AI score0.00068EPSS
CVE
CVE•added 2014/10/17 3:55 p.m.•54 views

CVE-2014-2063

Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

7.5CVSS9.2AI score0.00169EPSS
CVE
CVE•added 2014/10/17 3:55 p.m.•52 views

CVE-2014-2062

Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token.

6.5CVSS8.8AI score0.0015EPSS
CVE
CVE•added 2014/10/17 3:55 p.m.•48 views

CVE-2014-2060

The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors.

5CVSS9.2AI score0.00086EPSS
CVE
CVE•added 2014/10/17 3:55 p.m.•47 views

CVE-2014-2068

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

3.5CVSS8.4AI score0.00068EPSS