CVE-2017-2033

...

CVE-2017-2033

CVE-2017-2033 is rejected; this entry does not represent an active vulnerability.

Jenkins CSRF And XSS Vulnerabilities - Windows

Jenkins is prone to cross-site request forgery CSRF and cross- site scripting vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle: Security Advisory (ELSA-2011-2033)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2033

CVE-2015-2033 concerns Infoblox Network Automation NetMRI’s Anyterm Daemon, vulnerable before NETMRI-23483. A remote attacker can send a crafted terminal/anyterm-module request to achieve arbitrary command execution with root privileges. The vulnerability stems from how the Anyterm Daemon handles...

Adobe Shockwave Player <= 11.6.4.634 Multiple Memory Corruption Vulnerabilities (APSB12-13) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.6.4.634 or earlier. It is, therefore, affected by multiple unspecified memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulti...

CVE-2013-2033

CVE-2013-2033 affects Jenkins before 1.514, Jenkins LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1/1.480.x before 1.480.4.1. The vulnerability is a cross-site scripting (XSS) issue that allows remote authenticated users with write permission to inject arbitrary web script or HTML vi...

USN-2124-2: OpenJDK 6 regression

USN-2124-1 fixed vulnerabilities in OpenJDK 6. Due to an upstream regression, memory was not properly zeroed under certain circumstances which could lead to instability. This update fixes the problem. We apologize for the inconvenience. Original advisory details: A vulnerability was discovered in...

CVE-2014-2033

The CVE-2014-2033 issue affects Blue Coat ProxySG SGOS caching. The vulnerability allows remote authenticated users to bypass access controls in a time window after account deletion or modification by abusing knowledge of previously valid credentials. Affected software includes ProxySG SGOS versi...

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2124-1)

A vulnerability was discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to expose sensitive data over the network. CVE-2014-0411 Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data...

USN-2124-1: OpenJDK 6 vulnerabilities

A vulnerability was discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to expose sensitive data over the network. CVE-2014-0411 Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2033)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2033 advisory. - ipv6: make fragment identifications less predictable Joe Jin CVE-2011-2699 - vlan: fix panic when handling priority tagged frames Joe Jin...

FreeBSD : jenkins -- multiple vulnerabilities (622e14b1-b40c-11e2-8441-00e0814cab4e)

Jenkins Security Advisory reports : This advisory announces multiple security vulnerabilities that were found in Jenkins core. - SECURITY-63 / CVE-2013-2034 This creates a cross-site request forgery CSRF vulnerability on Jenkins master, where an anonymous attacker can trick an administrator to...

jenkins -- multiple vulnerabilities

Jenkins Security Advisory reports: This advisory announces multiple security vulnerabilities that were found in Jenkins core. SECURITY-63 / CVE-2013-2034 This creates a cross-site request forgery CSRF vulnerability on Jenkins master, where an anonymous attacker can trick an administrator to execu...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2033...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2032, and CVE-2012-2033...

CVE-2012-2033

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2032...

CVE-2012-2033

Adobe Shockwave Player is affected by memory corruption vulnerabilities in parsing DIR/DCR files (rcsL chunk); CVE-2012-2031 and related CVEs (including CVE-2012-2030, CVE-2012-2032, CVE-2012-2033) enable remote code execution or denial of service. The issues arise in Shockwave Player before 11.6...

CVE-2010-2033

CVE-2010-2033 corresponds to a directory traversal/LFI risk in Joomla! Percha components. The connected template documents detail two affected surfaces: (1) Percha Multicategory Article, component com_perchacategoriestree, version 0.6, where a dot-dot sequence in the index.php controller paramete...

CVE-2009-2033

CVE-2009-2033: XSS in Yogurt 0.3, via index.php msg parameter. Vulnerable component is index.php; root cause is input not sanitized, enabling remote injection of script/HTML. No remediation details provided in the supplied documents; exploitation status not specified.