Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Jenkins JenkinsThe Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attacker…

Risk 26
Severity
5
AV:N/AC:L/Au:N/C:N/I:P/A:N

The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors.

First published (updated )
CVE-2014-2060

maven/org.jenkins-ci.main:jenkins-coreBuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to byp…

Risk 48
Severity
6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.

First published (updated )
CVE-2014-2058

maven/org.jenkins-ci.main:jenkins-coreThe input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allo…

Risk 27
Severity
5
AV:N/AC:L/Au:N/C:P/I:N/A:N

The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.

First published (updated )
CVE-2014-2061

maven/org.jenkins-ci.main:jenkins-coreInfoleak

Risk 27
Severity
5
Infoleak
AV:N/AC:L/Au:N/C:P/I:N/A:N

The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts.

First published (updated )
CVE-2014-2064

maven/org.jenkins-ci.main:jenkins-coreSession fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attacker…

Risk 49
Severity
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies.

First published (updated )
CVE-2014-2066

maven/org.jenkins-ci.main:jenkins-coreXSS

Risk 23
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.

First published (updated )
CVE-2014-2065

maven/org.jenkins-ci.main:jenkins-coreJenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted…

Risk 48
Severity
6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P

Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token.

First published (updated )
CVE-2014-2062

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203