CVE-2012-0824

gnusound 0.7.5 has format string issue...

CVE-2012-0843

CVE-2012-0843 affects the uzbl browser, where information disclosure arises from a world-readable cookies storage file. Root cause is exposure of cookies data stored in a world-readable file, enabling partial confidentiality impact (C: HIGH in CVSS3.1) with local, low-complexity access and no aut...

CVE-2012-0824

gnusound 0.7.5 has format string issue...

CVE-2012-0824

CVE-2012-0824 affects gnusound 0.7.5 with a format string issue (root cause: improper format string handling). Public data in the initial doc shows CVSS metrics: CVSS v2 base 7.5 (HIGH) and CVSS v3.1 base 9.8 (CRITICAL). No explicit exploitation details or affected versions beyond 0.7.5 are provi...

CVE-2012-0842

surf: cookie jar has read access from other local user...

CVE-2012-0842

CVE-2012-0842 affects surf: the cookie jar can be read by a local user, enabling potential private cookie disclosure. The available documents describe the issue and its local access impact but do not provide exploitation details or remediation guidance.

CVE-2012-0842

surf: cookie jar has read access from other local user...

CVE-2012-4439

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins...

CVE-2012-4438

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code...

CVE-2012-4439

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins...

CVE-2012-4441

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

CVE-2012-4441

CVE-2012-4441 : Jenkins Core prior to 1.482 and LTS prior to 1.466.2 are affected by a Cross‑Site Scripting (XSS) vulnerability in the CI Game plugin, allowing remote attackers to inject arbitrary scripts/HTML in the vulnerable UI. The issue stems from inadequate input validation in the plugin, l...

CVE-2012-4440

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin...

CVE-2012-4440

CVE-2012-4440 is a Cross-site Scripting (XSS) vulnerability in Jenkins involving the Violations plugin. The issue affects Jenkins core builds prior to 1.482 and LTS lines prior to 1.466.2, where remote attackers could inject arbitrary web script or HTML via the Violations plugin. The connected do...

CVE-2012-4439

Jenkins core is affected by CVE-2012-4439: XSS via a crafted URL in Jenkins < 1.482 and LTS

CVE-2012-4439

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins...

CVE-2012-4438

Jenkins core before 1.482 and LTS before 1.466.2 is vulnerable to an input-validation issue that allows a user with read and HTTP access to the Jenkins master to insert data and execute arbitrary code. Affected components are org.jenkins-ci.main:jenkins-core in Jenkins prior to these versions. Im...

Lexmark Services Monitor 2.27.4.0.39 Directory Traversal

Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Google Dork: N/A​ Date: 2019​-11-15 Exploit Author: Kevin Randall​ Vendor Homepage: https://www.lexmark.com/enus.html​ Software Link: https://www.lexmark.com/enus.html​ Version: 2.27.4.0.39 Latest Version​ Tested on: Window...

Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal

Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Google Dork: N/A​ Date: 2019​-11-15 Exploit Author: Kevin Randall​ Vendor Homepage: https://www.lexmark.com/enus.html​ Software Link:...

Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Exploit Author: Kevin Randall​ Vendor Homepage: https://www.lexmark.com/enus.html​ Software Link: https://www.lexmark.com/enus.html​ Version: 2.27.4.0.39 Latest...