245 matches found
HPESBGN04180 rev.2 - HPE Edgeline Infrastructure Manager, Remote Disclosure of Sensitive Information
Potential Security Impact: Remote: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline Infrastructure Management Software - Prior to 1.24 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26586 |...
CVE-2021-20092
The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor...
Hardcoded credentials
Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...
PT-2020-19895 · Intellian · Intellian Satellian +1
Name of the Vulnerable Software and Affected Versions: Intellian Aptus Web version 1.24 Intellian Satellian version 1.12 Description: The issue allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the "cgi-bin/libagent.cgi" URI. A valid sid cookie for a log...
Veracrypt has an unspecified vulnerability
Veracrypt is a disk encryption program based on TrueCrypt. A security vulnerability exists in VeraCrypt version 1.24. An attacker can exploit the vulnerability to elevate privileges...
CVE-2019-19501
VeraCrypt 1.24 is affected by a Local Privilege Escalation via VeraCryptExpander.exe. The issue arises when an elevated process opens a browser homepage, enabling an attacker with limited admin privileges to hijack registry keys in HKCU (for multiple browsers) and run a malicious script, ultimate...
CVE-2019-19501
VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe...
PT-2019-11782 · Jenkins · Jenkins Relution Enterprise Appstore Publisher Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Relution Enterprise Appstore Publisher Plugin versions 1.24 and earlier Description: A cross-site request forgery issue allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server. Recommendations: For...
PT-2019-11783 · Jenkins · Jenkins Relution Enterprise Appstore Publisher Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Relution Enterprise Appstore Publisher Plugin versions 1.24 and earlier Description: A missing permission check in the plugin allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server. Recommendation...
CloudBees Jenkins Configuration as Code plugin log information leakage vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Configuration as Code Plugin is used in which a Jenki...
PT-2019-11758 · Jenkins · Jenkins Configuration As Code Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Configuration as Code Plugin versions 1.24 and earlier Description: The issue allows attackers with permission to change Jenkins system configuration to obtain the values of environment variables due to variable interpolation during...
PT-2019-11743 · Jenkins · Jenkins Configuration As Code Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Configuration as Code Plugin versions 1.24 and earlier Description: The issue concerns missing permission checks in various HTTP endpoints, allowing users with Overall/Read access to access the generated schema and documentation for t...
CloudBees Jenkins Configuration as Code Plugin Information Disclosure Vulnerability (CNVD-2019-42749)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Configuration as Code Plugin is used in which a Jenki...
HPE Moonshot Provisioning Manager Remote Security Restriction Bypass Vulnerability
PE Moonshot Provisioning Manager is an application for managing HPE Moonshot systems from Hewlett Packard Enterprise HPE, USA. A remote security restriction bypass vulnerability exists in HPE Moonshot Provisioning Manager versions prior to 1.24, which can be exploited by remote attackers to bypas...
HPE Moonshot Provisioning Manager Local Arbitrary File Modification Vulnerability
HPE Moonshot Provisioning Manager is an application for managing HPE Moonshot systems from Hewlett Packard Enterprise HPE. A local arbitrary file modification vulnerability exists in HPE Moonshot Provisioning Manager versions prior to 1.24, which can be exploited by a local attacker to modify...
CVE-2018-7073
A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...
CVE-2018-7072
A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...
WordPress WP Image Zoom plugin <=1.23 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Tom Adams in WordPress WP Image Zoom plugin versions =1.23. Solution Update the WordPress WP Image Zoom plugin to the latest available version at least 1.24...
CVE-2015-8009
The MWOAuthDataStore::lookuptoken function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11 does not properly validate the signature when checking the authorization signature, which allows remote registered Consumers to use another Consumer's...