NAME__________Jenkins Azure VM Agents Plugin security bypassPlatforms Affected:Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43Risk Level:4.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Jenkins Azure VM Agents Plugin...
NAME__________Jenkins Pipeline Utility Steps Plugin directory traversalPlatforms Affected:Jenkins Pipeline Utility Steps Plugin 2.15.2Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins Pipeline Utility Steps Plugin...
NAME__________Jenkins AppSpider Plugin security bypassPlatforms Affected:Jenkins AppSpider Plugin 1.0.15Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins AppSpider Plugin could allow a remote authenticated attacker...
NAME__________Jenkins HashiCorp Vault Plugin information disclosurePlatforms Affected:Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807dRisk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins HashiCorp Vault Plugin could allow a...
NAME__________Jenkins Ansible Plugin information disclosurePlatforms Affected:Jenkins Ansible Plugin 204.v8191fd551eb_fRisk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins Ansible Plugin could allow a remote authenticated attacker...
NAME__________Jenkins WSO2 Oauth Plugin cross-site request forgeryPlatforms Affected:Jenkins WSO2 Oauth Plugin 1.0Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins WSO2 Oauth Plugin is vulnerable...
NAME__________Jenkins SAML Single Sign On(SSO) Plugin security bypassPlatforms Affected:Jenkins SAML Single Sign On(SSO) Plugin 2.0.0Risk Level:4.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Jenkins SAML Single...
NAME__________Collaboraonline cross-site scriptingPlatforms Affected:Risk Level:4.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Collaboraonline is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...
NAME__________Jenkins Email Extension Plugin information disclosurePlatforms Affected:Jenkins Email Extension Plugin 2.96Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins Email Extension Plugin could allow a...
NAME__________Jenkins Azure VM Agents Plugin information disclosurePlatforms Affected:Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins Azure VM Agents Plugin...
NAME__________Jenkins Email Extension Plugin cross-site request forgeryPlatforms Affected:Jenkins Email Extension Plugin 2.96Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins Email Extension Plugin is vulnerable...
NAME__________Jenkins Code Dx Plugin information disclosurePlatforms Affected:Jenkins Code Dx Plugin 3.1.0Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins Code Dx Plugin could allow a...
NAME__________Jenkins LDAP Plugin cross-site request forgeryPlatforms Affected:Jenkins LDAP Plugin 673.v034ec70ec2b_b_Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins LDAP Plugin is vulnerable to cross-site request...
A Russian national has been charged and indicted by the U.S. Department of Justice (DoJ) for launching ransomware attacks against...
Image: Gaelle Marcel Kiddowares 'Parental Control – Kids Place' app for Android is impacted by multiple vulnerabilities that could enable attackers...
Geacon, a Go-based implementation of the beacon from the widely abused penetration testing suite Cobalt Strike, is being used more and more...
Cybersecurity researchers and IT admins have raised concerns over Google's new ZIP and MOV Internet domains, warning that threat actors...
A financially motivated cybergang tracked by Mandiant as 'UNC3944' is using phishing and SIM swapping attacks to hijack Microsoft Azure...
A Chinese state-sponsored hacking group named "Camaro Dragon" infects residential TP-Link routers with a custom "Horse Shell" malware used to...
The U.S. Justice Department has filed charges against a Russian citizen named Mikhail Pavlovich Matveev (also known as Wazawaka, Uhodiransomwar, m1x,...
As ransomware attacks continue to wreak havoc on organizations worldwide, many official standards and regulations have been established to address...
CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on May 9, 2023. These...
Mozilla Releases Security Advisories for Multiple Products Mozilla has released security advisories to address vulnerabilities in Thunderbird, Firefox and Firefox...
Microsoft Releases May 2023 Security Updates Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can...
