| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-1003046 | 4.3 |
A cross-site request forgery vulnerability in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers to initiate a connection to an attacker-specified server.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003042 | 3.5 |
A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003045 | 4.0 |
A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003044 | 2.1 |
A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003041 | 7.5 |
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin 2.64 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003040 | 7.5 |
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003048 | 2.1 |
A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003043 | 3.5 |
A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2019-1003047 | 4.0 |
A missing permission check in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
|
25-10-2023 - 18:16 | 28-03-2019 - 18:29 | |
| CVE-2003-0242 | 7.5 |
IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.
|
09-12-2020 - 15:06 | 09-06-2003 - 04:00 | |
| CVE-2019-1003041 | 7.5 |
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin 2.64 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
|
30-09-2020 - 12:41 | 28-03-2019 - 18:29 | |
| CVE-2019-1003040 | 7.5 |
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
|
30-09-2020 - 12:41 | 28-03-2019 - 18:29 | |
| CVE-2019-1003043 | 3.5 |
A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing
|
30-09-2020 - 12:38 | 28-03-2019 - 18:29 | |
| CVE-2019-1003045 | 4.0 |
A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration.
|
30-09-2020 - 12:38 | 28-03-2019 - 18:29 | |
| CVE-2019-1003047 | 4.0 |
A missing permission check in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
|
30-09-2020 - 12:37 | 28-03-2019 - 18:29 | |
| CVE-2019-1003048 | 2.1 |
A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.
|
29-09-2020 - 18:23 | 28-03-2019 - 18:29 | |
| CVE-2017-7748 | 7.8 |
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check.
|
03-10-2019 - 00:03 | 12-04-2017 - 23:59 | |
| CVE-2015-5739 | 7.5 |
The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allows remote attackers to conduct HTTP request smuggling attacks via a space instead of a hyphen, as demonstrated by "Content Length"
|
10-05-2019 - 16:45 | 18-10-2017 - 20:29 | |
| CVE-2015-5563 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5551 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5562 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by lever
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5544 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5134 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5561 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5133 | 10.0 |
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arb
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5559 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5546 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5132 | 10.0 |
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arb
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5129 | 10.0 |
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5557 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5556 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5541 | 10.0 |
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5130 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5558 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by lever
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5545 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5564 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5552 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5131 | 10.0 |
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arb
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5550 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5565 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5549 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5548 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5555 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by lever
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5560 | 10.0 |
Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute ar
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5547 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5554 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by lever
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5540 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5553 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5539 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2015-5127 | 10.0 |
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers t
|
05-01-2018 - 02:30 | 14-08-2015 - 01:59 | |
| CVE-2006-1970 | 4.3 |
Cross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter
|
20-07-2017 - 01:31 | 21-04-2006 - 10:02 | |
| CVE-2006-1968 | 5.8 |
Cross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order paramet
|
20-07-2017 - 01:31 | 21-04-2006 - 10:02 | |
| CVE-2006-1969 | 2.6 |
Cross-site scripting (XSS) vulnerability in search/search.cgi in an unspecified KCScripts script, probably Search Engine or Site Search, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary
|
20-07-2017 - 01:31 | 21-04-2006 - 10:02 | |
| CVE-2006-1967 | 2.6 |
Cross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter.
|
20-07-2017 - 01:31 | 21-04-2006 - 10:02 | |
| CVE-2008-0622 | 4.3 |
Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the ulang parameter.
|
08-03-2011 - 03:05 | 06-02-2008 - 12:00 |