6440 matches found
PT-2022-4035 · Jenkins · Jenkins Rhnpush-Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins rhnpush-plugin Plugin versions 0.5.1 and earlier Description: The issue is related to insufficient authorization procedures in the Jenkins rhnpush-plugin. This allows attackers with Item/Read permission but without Item/Workspace or...
Jenkins Android Signing Plugin security vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
PT-2022-4041 · Jenkins · Jenkins Rpmsign-Plugin Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins rpmsign-plugin Plugin versions 0.5.0 and earlier Description: The issue is related to insufficient authorization procedures in the Jenkins rpmsign-plugin Plugin, allowing remote attackers with Item/Read permission but without...
CVE-2022-36893: Missing Authorization
Jenkins rpmsign-plugin Plugin 0.5.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace...
CVE-2022-36892: Missing Authorization
Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace...
Missing permission check in rhnpush-plugin allows listing workspace contents
rhnpush-plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. A...
Missing permission check in rpmsign-plugin allows listing workspace contents
rpmsign-plugin 0.5.0 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. A...
Missing permission check in android-signing allows listing workspace contents
android-signing 2.2.5 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. A...
CVE-2022-36915: Missing Authorization
Jenkins Android Signing Plugin 2.2.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace...
CVE-2022-23745
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
CVE-2022-23745
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
CVE-2022-23745
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
Memory corruption
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
CVE-2022-23745
CVE-2022-23745 affects Capsule Workspace Android app (on GrapheneOS). The issue is a memory corruption vulnerability in the Capsule Workspace Android app that can cause the application to crash. The available documents do not indicate any ability to read or exfiltrate sensitive data. Remediation ...
CVE-2022-23745
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
PT-2022-16246
Name of the Vulnerable Software and Affected Versions Capsule Workspace Android app affected versions not specified Description A potential memory corruption issue was found in the Capsule Workspace Android app, which could result in application crashing. However, this issue could not be used to...
CVE-2022-23745: Out-of-bounds Write
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
Capsule Technologies Capsule Workspace Buffer Error Vulnerability
Capsule Technologies Capsule Workspace is an Android App by Capsule Technologies, Inc. A security vulnerability exists in Capsule Technologies Capsule Workspace 8.x series versions prior to 8.2.2 that stems from the presence of a memory corruption issue...
Slack: Hashed data exposure via WebSockets to Workspace Members
A vulnerability in Slack's system allowed for the exposure of members' email addresses and sensitive data through WebSockets. This occurred when users created or revoked a Shared Invite Link for their workspace, resulting in the transmission of hashed passwords to other workspace members. The iss...
