|
247501
|
4.3 |
MEDIUM
Network
|
jenkins
|
promoted_builds
|
An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform …
|
CWE-863
Incorrect Authorization
|
CVE-2018-1000114
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247502
|
5.4 |
MEDIUM
Network
|
jenkins
|
testlink
|
A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report nam…
|
CWE-79
Cross-site Scripting
|
CVE-2018-1000113
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247503
|
5.3 |
MEDIUM
Network
|
jenkins
|
mercurial
|
An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a list of nodes and us…
|
CWE-863
Incorrect Authorization
|
CVE-2018-1000112
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247504
|
5.3 |
MEDIUM
Network
|
jenkins
|
subversion
|
An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with networ…
|
CWE-863
Incorrect Authorization
|
CVE-2018-1000111
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247505
|
5.3 |
MEDIUM
Network
|
jenkins
|
git
|
An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.
|
CWE-863
Incorrect Authorization
|
CVE-2018-1000110
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247506
|
4.3 |
MEDIUM
Network
|
jenkins
|
google-play-android-publisher
|
An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credentia…
|
CWE-863
Incorrect Authorization
|
CVE-2018-1000109
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247507
|
6.1 |
MEDIUM
Network
|
jenkins
|
cppncss
|
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary Jav…
|
CWE-79
Cross-site Scripting
|
CVE-2018-1000108
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247508
|
6.5 |
MEDIUM
Network
|
jenkins
|
job_and_node_ownership
|
An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allo…
|
CWE-863
Incorrect Authorization
|
CVE-2018-1000107
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247509
|
5.4 |
MEDIUM
Network
|
jenkins
|
gerrit_trigger
|
An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overal…
|
CWE-863
Incorrect Authorization
|
CVE-2018-1000106
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247510
|
4.3 |
MEDIUM
Network
|
jenkins
|
gerrit_trigger
|
An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overal…
|
CWE-863
Incorrect Authorization
|
CVE-2018-1000105
|
2024-11-21 12:39 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|