|
199181
|
3.3 |
LOW
Local
|
jenkins
|
team_foundation_server
|
Jenkins Team Foundation Server Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with acces…
|
CWE-311
Missing Encryption of Sensitive Data
|
CVE-2020-2249
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199182
|
6.1 |
MEDIUM
Network
|
jenkins
|
jsgames
|
Jenkins JSGames Plugin 0.2 and earlier evaluates part of a URL as code, resulting in a reflected cross-site scripting (XSS) vulnerability.
|
CWE-79
Cross-site Scripting
|
CVE-2020-2248
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199183
|
6.5 |
MEDIUM
Network
|
jenkins
|
klocwork_analysis
|
Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
|
CWE-611
XXE
|
CVE-2020-2247
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199184
|
5.4 |
MEDIUM
Network
|
jenkins
|
valgrind
|
Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgr…
|
CWE-79
Cross-site Scripting
|
CVE-2020-2246
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199185
|
7.1 |
HIGH
Network
|
jenkins
|
valgrind
|
Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
|
CWE-611
XXE
|
CVE-2020-2245
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199186
|
5.4 |
MEDIUM
Network
|
jenkins
|
build_failure_analyzer
|
Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers …
|
CWE-79
Cross-site Scripting
|
CVE-2020-2244
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199187
|
5.4 |
MEDIUM
Network
|
jenkins
|
cadence_vmanager
|
Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Upda…
|
CWE-79
Cross-site Scripting
|
CVE-2020-2243
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199188
|
6.5 |
MEDIUM
Network
|
jenkins
|
database
|
A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified…
|
CWE-862
Missing Authorization
|
CVE-2020-2242
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199189
|
8.8 |
HIGH
Network
|
jenkins
|
database
|
A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials.
|
CWE-352
Origin Validation Error
|
CVE-2020-2241
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199190
|
8.8 |
HIGH
Network
|
jenkins
|
database
|
A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts.
|
CWE-352
Origin Validation Error
|
CVE-2020-2240
|
2024-11-21 14:25 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|