Vulnerabilities > Jenkins > Jenkins > 1.465

DATE CVE VULNERABILITY TITLE RISK
2013-03-19 CVE-2013-0331 Improper Input Validation vulnerability in Jenkins
Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to cause a denial of service via a crafted payload.
network
low complexity
jenkins CWE-20
4.0
2013-03-19 CVE-2013-0330 Security Bypass vulnerability in Jenkins
Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors.
network
low complexity
jenkins
4.0
2013-02-24 CVE-2013-0158 Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors.
network
high complexity
cloudbees jenkins
2.6
2013-02-24 CVE-2012-6073 Improper Input Validation vulnerability in multiple products
Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
5.8
2013-02-24 CVE-2012-6072 Improper Input Validation vulnerability in multiple products
CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
4.3