116 matches found
CVE-2022-1955
CVE-2022-1955 affects the Session app (version 1.13.0). The root cause described across sources is a lack of adequate security controls to prevent dynamic code manipulation, enabling an attacker with physical access to bypass the password/pin lock and access user data. Public details in the docum...
CVE-2022-34170
In Jenkins 2.320 through 2.355 both inclusive and LTS 2.332.1 through LTS 2.332.3 both inclusive the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting XSS vulnerability exploitable by attacker...
Cross site scripting
In Jenkins 2.320 through 2.355 both inclusive and LTS 2.332.1 through LTS 2.332.3 both inclusive the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting XSS vulnerability exploitable by attacker...
CVE-2022-34170
Summary (CVE-2022-34170): Jenkins core versions 2.320–2.355 and LTS 2.332.1–2.332.3 suffer an XSS in tooltips where the help icon’s tooltip does not escape the feature name, undoing the fix for SECURITY-1955. This enables stored XSS by attackers with Job/Configure permission via the UI. The issue...
Mozilla Firefox Security Advisory (MFSA2016-18) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CVE-2021-1955
CVE-2021-1955 describes a Denial of Service in Qualcomm’s Snapdragon stack caused by improper handling of connections when an association is rejected. The issue affects Snapdragon Auto/Compute/Connectivity and related Snapdragon lines (IoT, Wearables, Mobile, etc.). Root cause: mishandling of con...
CVE-2011-1955
This CVE entry is rejected/not used and does not represent an active vulnerability.
SUSE: Security Advisory (SUSE-SU-2019:1955-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apache CouchDB 3.0.0 Remote Privilege Escalation Vulnerability - Linux
CouchDB is prone to a remote privilege escalation vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Apache CouchDB 3.0.0 Remote Privilege Escalation Vulnerability - Windows
CouchDB is prone to a remote privilege escalation vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:couchdb";...
CVE-2020-1955
CVE-2020-1955 affects CouchDB 3.0.0 where the new require_valid_user_except_for_up setting was intended to require credentials for all endpoints except /_up, but a defect caused credentials not to be enforced at any endpoint when enabled. Multiple sources (NVD/NIST entry, OSV, SUSE and Nessus/Ope...
profilbeton.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1133308 Security Researcher metamorfosec Helped patch 1955 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting profilbeton.it websit...
Cisco Email Security Appliance Header Injection Vulnerability
According to its self-reported version, Cisco Email Security Appliance ESA is affected by a security bypass vulnerability. A flaw exists with the Sender Policy Framework SPF due to improper validation of SPF messages. An unauthenticated, remote attacker can exploit this, via a specially crafted S...
CVE-2019-1955
A vulnerability in the Sender Policy Framework SPF functionality of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to incomplete input and validation checking...
CVE-2019-1955
Cisco AsyncOS (ESA) SPF handling vulnerability (CVE-2019-1955) allows an unauthenticated, remote attacker to bypass header filters by sending specially crafted SPF packets. Root cause is incomplete input/validation for SPF messages. Affected product: Cisco Email Security Appliance with AsyncOS; c...
RHEL 6 : glusterfs (RHSA-2018:1955)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1955 advisory. - glusterfs: access trusted peer group via remote-host command CVE-2018-10841 Note that Nessus has not tested for this issue but has instead relied...
Security Bulletin: IBM MQ Light - Improper handling of authentication credentials (CVE-2015-1955)
Summary IBM MQ Light is vulnerable to a denial of service, caused by an improper handling of authentication credentials. By constructing particular byte sequences a remote attacker could cause the consumption of all CPU. Vulnerability Details CVEID: CVE-2015-1955 DESCRIPTION: IBM MQ Light is...
Mozilla Thunderbird Security Advisories - 1 - (MFSA2016-16, MFSA2016-38) - Windows
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...