Skip to content
OpenAdvisories

Archive

16 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /16 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium —
    CVE-2014-3663

    Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs

    Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2014-3667

    Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code

    Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2014-3679

    Jenkins Monitoring Plugin Reveals Sensitive Information via Unspecified Pages

    The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.

    org.jvnet.hudson.plugins:monitoring Maven
  • Medium —
    CVE-2014-3662

    Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability

    Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2014-3661

    Jenkins Denial of Service vulnerability

    Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2014-3680

    Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability

    Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2014-3666

    Jenkins allows for Code Execution via Crafted Packet to the CLI

    Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

    org.jenkins-ci.main:jenkins-core Maven