Archive

20 February 2019

Vulnerabilities first published on this day (UTC), newest first.

← January 2019 2019 / February /20 March 2019 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Medium 6.5

CVE-2019-3474 Public exploit

Path traversal vulnerability in Filr web application

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior …

Micro Focus Filr

Feb 20, 2019
Medium 4.3

CVE-2019-1003028

SSRF vulnerability due to missing permission check in Jenkins JMS Messaging Plugin

A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthenticationMethod.java that allows attackers with Overall/Read permission to have Jenkins connect to a …

Jenkins Project Jenkins JMS Messaging Plugin org.jenkins-ci.plugins:jms-messaging Web / CMS Maven

Feb 20, 2019
Medium 4.3

CVE-2019-1003025

Jenkins Cloud Foundry Plugin vulnerable to exposure of sensitive information

A exposure of sensitive information vulnerability exists in Jenkins Cloud Foundry Plugin 2.3.1 and earlier in AbstractCloudFoundryPushDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specifi…

Jenkins Project Jenkins Cloud Foundry Plugin org.jenkins-ci.plugins:cloudfoundry Web / CMS Maven

Feb 20, 2019
Medium 4.3

CVE-2019-1003027

SSRF vulnerability due to missing permission check in Jenkins OctopusDeploy Plugin

A server-side request forgery vulnerability exists in Jenkins OctopusDeploy Plugin 1.8.1 and earlier in OctopusDeployPlugin.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified URL and obtain the HTTP respon…

Jenkins Project Jenkins OctopusDeploy Plugin hudson.plugins.octopusdeploy:octopusdeploy Web / CMS Maven

Feb 20, 2019
Medium 4.3

CVE-2019-1003026

Jenkins Mattermost Notification Plugin vulnerable to SSRF

A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost server and…

Jenkins Project Jenkins Mattermost Notification Plugin org.jenkins-ci.plugins:mattermost Web / CMS Maven

Feb 20, 2019
Medium 6.1

CVE-2019-8331 Public exploit EPSS 16%

Bootstrap Vulnerable to Cross-Site Scripting

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

ceph fluent-bit pytorch ntopng Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems

Feb 20, 2019