All CVEs — page 642 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
This vulnerability allows authenticated attackers to delete arbitrary users' files and metadata by exploiting the DELETE /files/{id} endpoint in the file-center module of zlt2000 microservices-platform versions through 6.0.0, due to a lack of ownership validation.
This vulnerability allows authenticated users to change any account password without verifying the current password, posing a significant risk to account security.
The flaw allows authenticated users without roles to access administrative APIs, leading to unauthorized access and potential data manipulation.
The flaw allows attackers with Item/Configure permission to create or replace arbitrary files in the Jenkins controller's file system, leading to potential remote code execution.
The flaw allows attackers with Item/Configure permission to inject malicious scripts into Jenkins UI, leading to potential data theft and manipulation.
The flaw allows attackers to inject malicious JavaScript through the Jenkins Coverage Plugin's REST API, leading to a stored cross-site scripting (XSS) vulnerability.
The flaw allows attackers to inject malicious JavaScript through the Jenkins Warnings Plugin, leading to a stored cross-site scripting (XSS) vulnerability.