mqxmm

2 exploits Active since Sep 2023

CVE-2024-26229 NOMISEC HIGH STUB

Windows CSC Service - Elevation of Privilege via Heap-based Buffer Overflow

Windows CSC Service Elevation of Privilege Vulnerability

CVSS 7.8

View Code

CVE-2023-43494 NOMISEC MEDIUM SCANNER

Jenkins 2.50-2.423 LTS 2.60.1-2.414.1 - Info Disclosure

Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not exclude sensitive build variables (e.g., password parameter values) from the search in the build history widget, allowing attackers with Item/Read permission to obtain values of sensitive variables used in builds by iteratively testing different characters until the correct sequence is discovered.

CVSS 4.3

View Code