Export limit exceeded: 24818 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2019-1003005

jenkins-plugin-script-security: Sandbox Bypass in Script Security Plugin (SECURITY-1292)

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.

CVSS 3.1 · 8.8 High EPSS 19.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Openshift
CVE-2019-1003004

jenkins: deleting a user record will does not invalidate existing sessions

An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/AuthenticationProcessingFilter2.java that allows attackers to extend the duration of active HTTP sessions indefinitely even though the user account may have been deleted in the mean time.

CVSS 3.1 · 7.2 High EPSS 1.6% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift Openshift Container Platform
CVE-2019-1003003

jenkins: cookie crafted using Jenkins script console allows unauthorised access to Jenkins instance

An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/TokenBasedRememberMeServices2.java that allows attackers with Overall/RunScripts permission to craft Remember Me cookies that would never expire, allowing e.g. to persist access to temporarily compromised user accounts.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift Openshift Container Platform
CVE-2019-1003002

jenkins-plugin-pipeline-model-definition: Sandbox Bypass in Pipeline: Declarative

A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/plugins/pipeline/modeldefinition/parser/Converter.groovy that allows attackers with Overall/Read permission to provide a pipeline script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.

CVSS 3.1 · 8.8 High EPSS 81.1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Pipeline\ Openshift Openshift Container Platform
CVE-2019-1003001

jenkins-plugin-workflow-cps: Sandbox Bypass in Pipeline: Groovy Plugin

A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShellFactory.java that allows attackers with Overall/Read permission to provide a pipeline script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.

CVSS 3.1 · 8.8 High EPSS 86.1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Pipeline\ Openshift Openshift Container Platform
CVE-2019-1003000

jenkins-plugin-script-security: Sandbox Bypass in Script Security Plugin

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.

CVSS 3.1 · 8.8 High EPSS 98.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Openshift Openshift Container Platform
CVE-2019-1002101

kubectl cp path traversal

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. The untar function can both create and follow symbolic links. The issue is resolved in kubectl v1.11.9, v1.12.7, v1.13.5, and v1.14.0.

CVSS 3.0 · 6.4 Medium EPSS 12.8% KEV · Not listed
Vendors
Kubernetes Redhat
Products
Kubernetes Openshift Openshift Container Platform
CVE-2019-1002100

kube-apiserver: DoS with crafted patch of type json-patch

In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" (e.g. `kubectl patch --type json` or `"Content-Type: application/json-patch+json"`) that consumes excessive resources while processing, causing a Denial of Service on the API Server.

CVSS 3.1 · 6.5 Medium EPSS 16.9% KEV · Not listed
Vendors
Kubernetes Redhat
Products
Kubernetes Openshift Openshift Container Platform
CVE-2019-1000020

libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service

libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.

CVSS 3.1 · 6.5 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 6 more
CVE-2019-1000019

libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service

libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.

CVSS 3.1 · 6.5 Medium EPSS 3.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 6 more
CVE-2019-0981

dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.

CVSS 3.0 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Windows 10 and 9 more
CVE-2019-0980

dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.

CVSS 3.0 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Windows 10 and 9 more
CVE-2019-0820

dotnet: timeouts for regular expressions are not enforced

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

CVSS 3.1 · 7.5 High EPSS 5.7% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Windows 10 and 12 more
CVE-2019-0816

cloud-init: extra ssh keys added to authorized_keys on the Azure platform

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'.

CVSS 3.0 · 5.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Microsoft Redhat
Products
Ubuntu Linux Azure Enterprise Linux
CVE-2019-0804

WALinuxAgent: swapfile created with weak permissions

An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.

CVSS 3.0 · 6.5 Medium EPSS 5.2% KEV · Not listed
Vendors
Microsoft Redhat
Products
Walinuxagent Enterprise Linux
CVE-2019-0757

dotnet: NuGet Tampering Vulnerability

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Apple Microsoft Mono-project and 1 more
Products
Macos .net Core .net Core Sdk and 8 more
CVE-2019-0657

dotnet: Domain-spoofing attack in System.Uri

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

CVSS 3.0 · 5.9 Medium EPSS 4.6% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Powershell Core and 10 more
CVE-2019-0564

Core: Kestrel - WebSocket DoS via CancellationToken (CoreFX and ASP.NET)

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

CVSS 3.0 · 7.5 High EPSS 8.4% KEV · Not listed
Vendors
Microsoft Redhat
Products
Asp.net Core Rhel Dotnet
CVE-2019-0548

Core: AspNetCoreModule WebSocket DOS

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.

CVSS 3.0 · 7.5 High EPSS 8.2% KEV · Not listed
Vendors
Microsoft Redhat
Products
Asp.net Core Rhel Dotnet
CVE-2019-0545

Core: NCL - SocketsHttpHandler mishandling 1xx response as a final response leads to info disclosure

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.

CVSS 3.0 · 7.5 High EPSS 9.6% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Windows 10 and 9 more