Skip to content
OpenAdvisories

Archive

25 November 2015

Vulnerabilities first published on this day (UTC), newest first.

← October 2015 2015 / November /25 December 2015 →
  1. 1 
  2. 214
  3. 310
  4. 413
  5. 523
  6. 622
  7. 72
  8. 819
  9. 924
  10. 1014
  11. 1167
  12. 129
  13. 136
  14. 148
  15. 152
  16. 1613
  17. 1721
  18. 1817
  19. 1915
  20. 203
  21. 219
  22. 223
  23. 233
  24. 2418
  25. 2519
  26. 265
  27. 272
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low —
    CVE-2015-5318

    Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack

    Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.

    org.jenkins-ci.main:jenkins-core Maven
  • Low —
    CVE-2015-5326

    Jenkins allows Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.

    org.jenkins-ci.main:jenkins-core Maven