org.jenkins-ci.plugins:git (2.3.1), org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28) +2 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.12.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.3.1 - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0,...

org.jenkins-ci.plugins.nodesharing:node-sharing-executor (>=2.0.0, <=2.0.3), org.jenkins-ci.plugins.nodesharing:node-sharing-lib (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.17.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.nodesharing:node-sharing-executor =2.0.0, =2.0.0, =2.0.0, =2.0.0,...

com.amcbridge:build-configurator (>=1.0.5.0, <=1.0.6.1), com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9) +28 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.19.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.amcbridge:build-configurator =1.0.5.0, =1.9.2-beta, =1.0.22, =1.0.0, =0.0.8, =1.0-alpha-...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) +2 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.9.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =1.6.1, =1.6.7...

org.jenkins-ci.plugins:fitnesse (>=1.12, <=1.13), org.jenkins-ci.plugins:git (>=1.4.0, <=1.5.0) +2 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.0.6)

org.jenkins-ci.plugins:git-client MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:fitnesse =1.12, =1.4.0, =1.0, =0.1, =0.4 Source cves: CVE-2017-1000242...

org.jenkins-ci.plugins:git (>=2.2.6, <=2.3-beta-3), org.jenkins-ci.plugins:git-tag-message (>=1.0, <=1.5) +1 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.10.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git =2.2.6, =1.0, =0.1-beta-3, =0.1-beta-8 Source cves:...

com.barchart.jenkins:maven-release-cascade (>=1.1.0, <=1.3.2), org.jenkins-ci.plugins:git (1.3.0) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.0.4)

org.jenkins-ci.plugins:git-client MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.1.0, =1.3.2 - org.jenkins-ci.plugins:git 1.3.0...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.6.3)

org.jenkins-ci.plugins:git-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0,...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1), org.jenkins-ci.plugins:git (1.2.0) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.0.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 -...

Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory. This could be exploited using write-AV when writing to a slot of a JavaScript nu...

GHSA-9F2P-WM46-6M5F Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory. This could be exploited using write-AV when writing to a slot of a JavaScript nu...

Chakra Core vulnerable to privilege escalation due to reading an invalid pointer

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". When trying to get...

GHSA-735F-MX7H-46W8 ChakraCore vulnerable to remote code execution due to insufficient InlineCache check

ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". An insufficient...

GHSA-923J-972P-HCHF ChakraCore RCE Vulnerability

ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889,...

GeniXCMS XSS Vulnerability

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765...

Security Bulletin: IBM Transformation Extender Advanced is Potentially Vulnerable to an XML External Entity (XXE) Injection in its REST API.

Summary IBM 10x framework used by IBM Transformation Extender Advanced REST API is vulnerable to XXE injection. The vulnerability was reported by IBM Financial Transaction Manager for ACH Services for Multi-Platform which also uses the IBM 10x framework. Vulnerability Details CVEID:CVE-2017-1758...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Standards Processing Engine and IBM Transformation Extender Advanced (CVE-2015-2017).

Summary IBM WebSphere Application Server Liberty is shipped with IBM Standards Processing Engine and IBM Transformation Extender Advanced. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. Vulnerability Details...

MGASA-2022-0186 Updated cairo packages fix security vulnerability

cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read because of mishandling of an unexpected malloc0 call. CVE-2017-9814...

CVE-2017-12174

It was found that when Artemis and HornetQ are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError...

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Thi...