| Max CVSS | 6.8 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-2281 | 5.8 |
A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources.
|
21-12-2023 - 01:40 | 23-09-2020 - 14:15 | |
| CVE-2020-2280 | 6.8 |
A cross-site request forgery (CSRF) vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code.
|
03-11-2023 - 17:45 | 23-09-2020 - 14:15 | |
| CVE-2020-2283 | 3.5 |
Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not escape changeset contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control changeset files evaluated by the plugin.
|
02-11-2023 - 21:47 | 23-09-2020 - 14:15 | |
| CVE-2020-2279 | 6.5 |
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.74 and earlier allows attackers with permission to define sandboxed scripts to provide crafted return values or script binding content that can result in arbitrary code execution on t
|
25-10-2023 - 18:16 | 23-09-2020 - 14:15 | |
| CVE-2020-2284 | 5.5 |
Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
|
25-10-2023 - 18:16 | 23-09-2020 - 14:15 | |
| CVE-2020-2285 | 4.0 |
A missing permission check in Jenkins Liquibase Runner Plugin 1.4.7 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
|
25-10-2023 - 18:16 | 23-09-2020 - 14:15 | |
| CVE-2020-2282 | 4.0 |
Jenkins Implied Labels Plugin 0.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to configure the plugin.
|
25-10-2023 - 18:16 | 23-09-2020 - 14:15 | |
| CVE-2020-2285 | 4.0 |
A missing permission check in Jenkins Liquibase Runner Plugin 1.4.7 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
|
30-09-2020 - 17:57 | 23-09-2020 - 14:15 | |
| CVE-2020-2285 | 4.0 |
A missing permission check in Jenkins Liquibase Runner Plugin 1.4.7 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
|
30-09-2020 - 17:57 | 23-09-2020 - 14:15 | |
| CVE-2020-2279 | 6.5 |
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.74 and earlier allows attackers with permission to define sandboxed scripts to provide crafted return values or script binding content that can result in arbitrary code execution on t
|
28-09-2020 - 20:32 | 23-09-2020 - 14:15 | |
| CVE-2020-2279 | 6.5 |
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.74 and earlier allows attackers with permission to define sandboxed scripts to provide crafted return values or script binding content that can result in arbitrary code execution on t
|
28-09-2020 - 20:32 | 23-09-2020 - 14:15 | |
| CVE-2020-2280 | 6.8 |
A cross-site request forgery (CSRF) vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code.
|
28-09-2020 - 20:30 | 23-09-2020 - 14:15 | |
| CVE-2020-2280 | 6.8 |
A cross-site request forgery (CSRF) vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code.
|
28-09-2020 - 20:30 | 23-09-2020 - 14:15 | |
| CVE-2020-2281 | 5.8 |
A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources.
|
28-09-2020 - 20:13 | 23-09-2020 - 14:15 | |
| CVE-2020-2281 | 5.8 |
A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources.
|
28-09-2020 - 20:13 | 23-09-2020 - 14:15 | |
| CVE-2020-2282 | 4.0 |
Jenkins Implied Labels Plugin 0.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to configure the plugin.
|
28-09-2020 - 20:11 | 23-09-2020 - 14:15 | |
| CVE-2020-2282 | 4.0 |
Jenkins Implied Labels Plugin 0.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to configure the plugin.
|
28-09-2020 - 20:11 | 23-09-2020 - 14:15 | |
| CVE-2020-2283 | 3.5 |
Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not escape changeset contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control changeset files evaluated by the plugin.
|
28-09-2020 - 20:03 | 23-09-2020 - 14:15 | |
| CVE-2020-2283 | 3.5 |
Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not escape changeset contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control changeset files evaluated by the plugin.
|
28-09-2020 - 20:03 | 23-09-2020 - 14:15 | |
| CVE-2020-2284 | 5.5 |
Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
|
28-09-2020 - 19:59 | 23-09-2020 - 14:15 | |
| CVE-2020-2284 | 5.5 |
Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
|
28-09-2020 - 19:59 | 23-09-2020 - 14:15 |