Skip to content
OpenAdvisories

Archive

16 October 2015

Vulnerabilities first published on this day (UTC), newest first.

← September 2015 2015 / October /16 November 2015 →
  1. 136
  2. 27
  3. 324
  4. 417
  5. 520
  6. 630
  7. 7 
  8. 83
  9. 949
  10. 10 
  11. 114
  12. 1216
  13. 133
  14. 14109
  15. 1522
  16. 1621
  17. 17 
  18. 1823
  19. 1918
  20. 20 
  21. 21136
  22. 22 
  23. 2371
  24. 24 
  25. 2511
  26. 2624
  27. 279
  28. 2826
  29. 2922
  30. 3019
  31. 316
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2015-1810

    Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation

    The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2015-1812

    Jenkins Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2015-1806

    Jenkins allows for Privilege Escalation by Remote Authenticated Users

    The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2015-1814

    Jenkins allows for Privilege Escalation by Remote Authenticated Users

    The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change" involving anonymous users.

    org.jenkins-ci.main:jenkins-core Maven