FreeBSD : jenkins -- multiple vulnerabilities (622e14b1-b40c-11e2-8441-00e0814cab4e)

Jenkins Security Advisory reports : This advisory announces multiple security vulnerabilities that were found in Jenkins core. - SECURITY-63 / CVE-2013-2034 This creates a cross-site request forgery CSRF vulnerability on Jenkins master, where an anonymous attacker can trick an administrator to...

jenkins -- multiple vulnerabilities

Jenkins Security Advisory reports: This advisory announces multiple security vulnerabilities that were found in Jenkins core. SECURITY-63 / CVE-2013-2034 This creates a cross-site request forgery CSRF vulnerability on Jenkins master, where an anonymous attacker can trick an administrator to execu...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2033...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2032, and CVE-2012-2033...

CVE-2012-2033

Adobe Shockwave Player is affected by memory corruption vulnerabilities in parsing DIR/DCR files (rcsL chunk); CVE-2012-2031 and related CVEs (including CVE-2012-2030, CVE-2012-2032, CVE-2012-2033) enable remote code execution or denial of service. The issues arise in Shockwave Player before 11.6...

CVE-2012-2033

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2032...

CVE-2010-2033

CVE-2010-2033 corresponds to a directory traversal/LFI risk in Joomla! Percha components. The connected template documents detail two affected surfaces: (1) Percha Multicategory Article, component com_perchacategoriestree, version 0.6, where a dot-dot sequence in the index.php controller paramete...

CVE-2009-2033

CVE-2009-2033: XSS in Yogurt 0.3, via index.php msg parameter. Vulnerable component is index.php; root cause is input not sanitized, enabling remote injection of script/HTML. No remediation details provided in the supplied documents; exploitation status not specified.

CVE-2009-2033

creationtimestamp| type| source ---|---|--- 2009-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8932...

CVE-2008-2033

...

CVE-2008-2033

CVE-2008-2033 is a duplicate of CVE-2008-1381 (Rejected reason indicates this). Connected documents link CVE-2008-1381 to Fedora zoneminder updates (FEDORA-2008-3462, FEDORA-2008-3601, FEDORA-2008-3516) and related OpenVAS/Nessus entries, which reference the zoneminder updates and CVE-2008-1381. ...

CVE-2007-2033

Unspecified vulnerability in Cisco Wireless Control System WCS before 4.0.81.0 allows remote authenticated users to read any configuration page by changing the group membership of user accounts, aka Bug ID CSCse78596...

CVE-2006-2033

PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. NOTE: this is a different vector than CVE-2006-1212, although it might be the same primary issue...

CVE-2006-2033

CoreNews risk (CVE-2006-2033): A PHP remote file inclusion vulnerability affecting Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. This is described as a distinct vector from CVE-2006-1212. Affected: CoreNews 2.0.1 and earlie...

CVE-2002-2033

FAQManager’s FAQManager CGI (faqmanager.cgi) is affected by CVE-2002-2033. The vulnerability occurs in version 2.2.5 and earlier, where an attacker can read arbitrary files on the web server by supplying a filename in the toc parameter with a trailing null character (%00). This is a web-applicati...

CVE-2005-2033

The CVE concerns i-Gallery by Blue-Collar Productions (version up to 3.3). A directory traversal flaw in folderview.asp allows an unauthenticated user to read arbitrary files and directories via the folder parameter. Connected Nessus data also notes potential XSS issues in i-Gallery

CVE-2005-2033

Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to read arbitrary files and directories via the folder parameter...

CVE-2005-2033

Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to read arbitrary files and directories via the folder parameter...

CVE-2004-2033

CVE-2004-2033 affects Orenosv 0.5.9f. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a long HTTP GET request. Impact as stated: partial availability. Root cause/technical detail beyond this description is not provided in the connected documents. No remed...

FAQManager 'faqmanager.cgi' 'toc' Parameter Arbitrary File Access

FAQManager is a Perl-based CGI for maintaining a list of Frequently Asked Questions. Using a specially crafted URL, a remote attacker can use this CGI to view arbitrary files on the web server. For example: http://www.example.com/cgi-bin/faqmanager.cgi?toc=/etc/passwd%00 %NASLMINLEVEL 70300 This...