100 matches found
CVE-2015-1811
XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...
CVE-2015-1811
Jenkins XXE: XML External Entity handling flaw in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows reading arbitrary XML files via crafted XML documents. Root cause: improper XML processing. Affected products/versions are Jenkins core prior to 1.600 and LTS prior to 1.596.1. Remediati...
CVE-2015-1811
XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...
CVE-2013-1811
CVE-2013-1811 affects MantisBT prior to 1.2.13, where users with Reporter permissions can change any issue to the New status due to an access-control flaw. The impact is an improper state change/authorization weakness; CVSS metrics in the public entry indicate a MEDIUM base severity (approx. 4.3/...
CVE-2019-0344
Due to unsafe deserialization used in SAP Commerce Cloud virtualjdbc extension, versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection...
CVE-2019-0343
SAP Commerce Cloud Mediaconversion Extension, versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, allows an authenticated Backoffice/HMC user to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the application...
CVE-2019-1811
Cisco NX-OS has a local, authenticated vulnerability in the Image Signature Verification feature that can allow an administrator to install an unsigned software image due to signatures not being properly verified during CLI command execution. Affected product: Cisco NX-OS Software; the issue stem...
McAfee MVision Endpoint Authentication Vulnerability
McAfee MVision Endpoint is a set of endpoint security protection software from the U.S. company McAfee McAfee. A security vulnerability exists in versions prior to McAfee MVision Endpoint 1811 Update 1 18.11.31.62. The vulnerability can be exploited by an attacker to uninstall MVision Endpoint...
CVE-2019-3584
Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 18.11.31.62 allows authenticated administrator users -- administrators to Remove MVision Endpoint via unspecified vectors...
CVE-2017-1811
CVE-2017-1811 entry is rejected/not used per the Initial Description.
HP Intelligent Management Center < 5.0 E0102 - UAM Buffer Overflow Exploit
Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'HP Intelligent Management Center UAM Buffer Overflow', 'Description' = ...
CVE-2016-1811
CVE-2016-1811 affects ImageIO in Apple products: iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1. Root cause: a crafted image leads to a NULL pointer dereference, causing a denial of service. Apple’s security notes for tvOS 9.2.1 list ImageIO remediation; update...
Oracle: Security Advisory (ELSA-2011-1811)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for jenkins-executable-war FEDORA-2015-5430
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 22 : jenkins-1.606-1.fc22 / jenkins-executable-war-1.29-4.fc22 / jffi-1.2.7-5.fc22 (2015-5430)
Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...
Fedora 21 : jenkins-1.590-3.fc21 (2015-5466)
Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...
Fedora Update for jenkins FEDORA-2015-5466
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-3120-1 : mantis - security update
Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...
Debian Security Advisory DSA 3120-1 (mantis - security update)
Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. OpenVAS Vulnerability Test $Id: deb3120.nasl 6609 2017-07-07 12:05:59Z...