Lucene search
+L

100 matches found

UbuntuCve
UbuntuCve
added 2020/01/15 7:15 p.m.43 views

CVE-2015-1811

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...

7.5CVSS7.2AI score0.01414EPSS
SaveExploits0References2
CVE
CVE
added 2020/01/15 6:05 p.m.99 views

CVE-2015-1811

Jenkins XXE: XML External Entity handling flaw in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows reading arbitrary XML files via crafted XML documents. Root cause: improper XML processing. Affected products/versions are Jenkins core prior to 1.600 and LTS prior to 1.596.1. Remediati...

7.5CVSS7.2AI score0.01414EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/01/15 6:05 p.m.36 views

CVE-2015-1811

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...

7.2AI score0.01414EPSS
SaveExploits0References2
CVE
CVE
added 2019/11/07 10:28 p.m.75 views

CVE-2013-1811

CVE-2013-1811 affects MantisBT prior to 1.2.13, where users with Reporter permissions can change any issue to the New status due to an access-control flaw. The impact is an improper state change/authorization weakness; CVSS metrics in the public entry indicate a MEDIUM base severity (approx. 4.3/...

4.3CVSS4.8AI score0.01025EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2019/08/14 1:53 p.m.45 views

CVE-2019-0344

Due to unsafe deserialization used in SAP Commerce Cloud virtualjdbc extension, versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection...

9.8AI score0.07079EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/08/14 1:53 p.m.37 views

CVE-2019-0343

SAP Commerce Cloud Mediaconversion Extension, versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, allows an authenticated Backoffice/HMC user to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the application...

8.7AI score0.01482EPSS
SaveExploits0References2
CVE
CVE
added 2019/05/15 10:20 p.m.82 views

CVE-2019-1811

Cisco NX-OS has a local, authenticated vulnerability in the Image Signature Verification feature that can allow an administrator to install an unsigned software image due to signatures not being properly verified during CLI command execution. Affected product: Cisco NX-OS Software; the issue stem...

7.2CVSS6.5AI score0.00265EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2019/01/25 12:00 a.m.8 views

McAfee MVision Endpoint Authentication Vulnerability

McAfee MVision Endpoint is a set of endpoint security protection software from the U.S. company McAfee McAfee. A security vulnerability exists in versions prior to McAfee MVision Endpoint 1811 Update 1 18.11.31.62. The vulnerability can be exploited by an attacker to uninstall MVision Endpoint...

7.4CVSS6.7AI score0.00335EPSS
SaveExploits0References1
OSV
OSV
added 2019/01/23 3:29 p.m.8 views

CVE-2019-3584

Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 18.11.31.62 allows authenticated administrator users -- administrators to Remove MVision Endpoint via unspecified vectors...

6CVSS6.8AI score0.00335EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/01/05 2:00 p.m.11 views

CVE-2017-1811

...

SaveExploits0
CVE
CVE
added 2018/01/05 2:00 p.m.27 views

CVE-2017-1811

CVE-2017-1811 entry is rejected/not used per the Initial Description.

7.3AI score
SaveExploits0
zdt
zdt
added 2017/03/23 12:00 a.m.58 views

HP Intelligent Management Center < 5.0 E0102 - UAM Buffer Overflow Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'HP Intelligent Management Center UAM Buffer Overflow', 'Description' = ...

10CVSS6.3AI score0.61762EPSS
SaveExploits3
CVE
CVE
added 2016/05/20 10:00 a.m.72 views

CVE-2016-1811

CVE-2016-1811 affects ImageIO in Apple products: iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1. Root cause: a crafted image leads to a NULL pointer dereference, causing a denial of service. Apple’s security notes for tvOS 9.2.1 list ImageIO remediation; update...

6.5CVSS6AI score0.02214EPSS
SaveExploits0References10Affected Software1
OpenVAS
OpenVAS
added 2015/10/06 12:00 a.m.36 views

Oracle: Security Advisory (ELSA-2011-1811)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS4.3AI score0.10487EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/07/07 12:00 a.m.49 views

Fedora Update for jenkins-executable-war FEDORA-2015-5430

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.02523EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/04/22 12:00 a.m.43 views

Fedora 22 : jenkins-1.606-1.fc22 / jenkins-executable-war-1.29-4.fc22 / jffi-1.2.7-5.fc22 (2015-5430)

Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

7.5CVSS8AI score0.02523EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
added 2015/04/20 12:00 a.m.36 views

Fedora 21 : jenkins-1.590-3.fc21 (2015-5466)

Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

7.5CVSS8AI score0.02523EPSS
SaveExploits0References18
OpenVAS
OpenVAS
added 2015/04/19 12:00 a.m.64 views

Fedora Update for jenkins FEDORA-2015-5466

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.02523EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/01/08 12:00 a.m.50 views

Debian DSA-3120-1 : mantis - security update

Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

7.5CVSS5.3AI score0.50561EPSS
SaveExploits16References23
OpenVAS
OpenVAS
added 2015/01/06 12:00 a.m.83 views

Debian Security Advisory DSA 3120-1 (mantis - security update)

Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. OpenVAS Vulnerability Test $Id: deb3120.nasl 6609 2017-07-07 12:05:59Z...

7.5CVSS0.7AI score0.50561EPSS
SaveExploits16References1
Rows per page
Query Builder