Show filters
1,655 Total Results
Displaying 151-160 of 1,655
Sort by:
Attacker Value
Unknown
CVE-2023-37963
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and to check for the existence of directories, `.csv`, and `.ycsb` files on the Jenkins controller file system.
0
Attacker Value
Unknown
CVE-2023-37962
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers to connect to an attacker-specified URL and to check for the existence of directories, `.csv`, and `.ycsb` files on the Jenkins controller file system.
0
Attacker Value
Unknown
CVE-2023-37961
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into logging in to the attacker's account.
0
Attacker Value
Unknown
CVE-2023-37960
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems.
0
Attacker Value
Unknown
CVE-2023-37959
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
0
Attacker Value
Unknown
CVE-2023-37958
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL.
0
Attacker Value
Unknown
CVE-2023-37957
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline restFul API Plugin 0.11 and earlier allows attackers to connect to an attacker-specified URL, capturing a newly generated JCLI token.
0
Attacker Value
Unknown
CVE-2023-37956
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
0
Attacker Value
Unknown
CVE-2023-37955
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
0
Attacker Value
Unknown
CVE-2023-37954
Disclosure Date: July 12, 2023 (last updated October 08, 2023)
A cross-site request forgery (CSRF) vulnerability in Jenkins Rebuilder Plugin 320.v5a_0933a_e7d61 and earlier allows attackers to rebuild a previous build.
0
