151 matches found
CVE-2021-2109
creationtimestamp| type| source ---|---|--- 2021-01-20 18:37:43+00:00| seen| https://t.me/cibsecurity/22389 2021-01-24 14:36:01+00:00| seen| https://t.me/CyberSecurityTechnologies/2562 2021-02-07 20:56:01+00:00| published-proof-of-concept| https://t.me/reconshell/420 2021-08-09 11:06:06+00:00|...
CVE-2021-2109
CVE-2021-2109 affects Oracle WebLogic Server (Console component) across 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. The vulnerability enables remote code execution via HTTP through a JNDI injection path, potentially allowing takeover of the WebLogic Server. Public exploit/poc code...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.3.35 jenkins-2-plugins security update
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.4.z jenkins-2-plugins security update
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 7 : OpenShift Container Platform 4.4.z jenkins-2-plugins (RHSA-2020:2737)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2737 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...
CVE-2020-2109
Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter expressions in CPS-transformed methods...
CVE-2020-2109
CVE-2020-2109 is corroborated by the GHSA entry for Jenkins Pipeline: Groovy Plugin. The vulnerability concerns sandbox protection bypass via default parameter expressions in CPS-transformed methods, affecting Jenkins Pipeline: Groovy Plugin versions 2.78 and earlier. The connected documents iden...
CVE-2013-2109
WordPress plugin wp-cleanfix has Remote Code Execution...
CVE-2013-2109
CVE-2013-2109 affects WordPress plugin wp-cleanfix, with a Remote Code Execution vulnerability. The NVD lists CVSS-2.0 base score 6.8 (Partial confidentiality, integrity, availability impact) and CVSS-3.1 base score 8.8 (High impact, network attack, user interaction required). The connected docum...
CVE-2013-2109
WordPress plugin wp-cleanfix has Remote Code Execution...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to...
Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2019-2217)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM i (CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176)
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by...
CVE-2019-2109
creationtimestamp| type| source ---|---|--- 2019-07-08 21:00:11+00:00| seen| https://t.me/cveNotify/309...
CVE-2019-2109
CVE-2019-2109 affects Android via the Media/AVIExtractor path: In MakeMPEG4VideoCodecSpecificData (AVIExtractor.cpp) there is an out-of-bounds write caused by an incorrect bounds check, enabling remote code execution with no extra privileges and requiring user interaction for exploitation. Affect...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware. IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmwarehas addressed the applicable CVEs...
CVE-2018-2109
CVE-2018-2109 is rejected/not used and does not represent an active vulnerability entry.
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Systems Director (CVE-2016-2108,CVE-2016-2109,CVE-2016-2176)
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Systems Director. IBM Systems Director has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary...
Security Bulletin: Multiple Vulnerabilities in OpenSSL affect Rational Insight
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by Rational Insight. Rational Insight has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on...