Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-2098

A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Jenkins
Products
Sounds
CVE-2020-2097

Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Jenkins
Products
Sounds