8 matches found
CVE-2019-16549
Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity XXE attacks, allowing man-in-the-middle attackers to have Jenkins parse crafted XML documents...
CVE-2019-16549
Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity XXE attacks, allowing man-in-the-middle attackers to have Jenkins parse crafted XML documents...
CVE-2019-16549
Vulnerability: Jenkins Maven Release Plugin (versions 0.16.1 and earlier) suffers an XXE flaw because the XML parser isn’t configured to neutralize external entities. Impact (as described): MITM attackers could force Jenkins to parse crafted XML, enabling potential extraction of secrets, server-s...
CVE-2018-16549
HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter...
CVE-2018-16549
CVE-2018-16549 affects HScripts PHP File Browser Script v1.0. The vulnerability is a directory traversal flaw in the index.php path parameter that can enable reading of arbitrary files, as described by multiple sources (CNVD-2018-19431, RH and NVD entries). The root cause is improper validation o...
CVE-2018-16549
HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter...
CVE-2017-16549
K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...
CVE-2017-16549
CVE-2017-16549 affects K7 Antivirus Premium prior to version 15.1.0.53 . The issue allows local users to write to arbitrary memory locations via a specific set of IOCTL calls, resulting in local privilege escalation (gaining higher privileges). Exploitation status is not detailed in the provided ...