CVE Database and Vulnerability Search

Browse vendorsBrowse ecosystems

Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.

Vulnerabilities
381,276
with PoCs
37,250
CISA KEV
1,665
Ransomware
606
with Nuclei
4,342
Advanced

Showing 3 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Jenkins build-metrics Plugin Missing Authorization vulnerability

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them.

CWE-862CWE-863Jun 30, 2022
CVSS4.3v3.1EPSS0.649%PoCs0SignalsSTIX

Cross site scripting in Jenkins build-metrics Plugin

Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Build/Update permission.

CWE-79Jun 30, 2022
CVSS5.4v3.1EPSS0.715%PoCs0SignalsSTIX

Jenkins build-metrics Plugin reflected cross-site scripting vulnerability

A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.

CWE-79Oct 23, 20191 related artifact
CVSS6.1v3.1EPSS57.7%PoCs2SignalsSTIX