Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (3 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-57288 1 Jenkins Project 1 Jenkins Active Directory Plugin 2026-06-24 3.7 Low
Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native (ADSI) authentication path, allowing unauthenticated attackers to inject LDAP wildcard characters to enumerate directory entries and to authenticate as a matching user whose password they know without knowing their exact user name.
CVE-2026-48919 2 Jenkins, Jenkins Project 2 Active Directory, Jenkins Active Directory Plugin 2026-06-18 6.6 Medium
Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.
CVE-2026-48918 2 Jenkins, Jenkins Project 2 Active Directory, Jenkins Active Directory Plugin 2026-05-30 6.6 Medium
Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.