CVE-2023-2134

CVE-2023-2134 affects Google Chrome/Chromium prior to 112.0.5615.137, due to an out-of-bounds memory access in the Service Worker API that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is rated High severity with network attack vector and user...

Stable Channel Update for Desktop

The Stable and extended stable channel has been updated to 112.0.5615.137/138 for Windows and 112.0.5615.137 for Mac and 112.0.5615.165 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log Stable Channel Update for Desktop -...

KLA48975 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds memory access vulnerability in Service Worker API can be exploited to cause...

Security Bulletin: Unauthorized access exposure on IBM SAN Volume Controller and Storwize Family (CVE-2013-2251, CVE-2013-2248 CVE-2013-2135, CVE-2013-2134, CVE-2013-2115, CVE-2013-1966 and CVE-2013-1965)

Summary Security Bulletin: Unauthorized access exposure on IBM SAN Volume Controller and Storwize Family CVE-2013-2251 CVE-2013-2248 CVE-2013-2135 CVE-2013-2134 CVE-2013-2115 CVE-2013-1966 CVE-2013-1965 Vulnerability Details Security Bulletin --- Summary --- Administrative access to the system vi...

Advisory ROSA-SA-2023-2134

Software: java-11-openjdk 11.0.18.0.10-1 OS: rosa-server79 packageevrstring: java-11-openjdk-11.0.18.0.10-1 CVE-ID: CVE-2021-35603 BDU-ID: None CVE-Crit: LOW CVE-DESC: A vulnerability in the Java SE product, Oracle GraalVM Enterprise Edition for Oracle Java SE component: JSSE. A...

CVE-2022-2134

CVE-2022-2134 affects the InvenTree project (inventree/inventree) prior to version 0.8.0, where the issue derives from allocating resources without limits or throttling in the notes/annotations feature. This can allow an attacker to exhaust server resources and potentially cause denial of service...

Apache Struts Security Update (S2-012, S2-015) - Version Check

The remote host is missing a security update for Apache Struts announced via the referenced advisories. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2021-2134

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: FMW Control Plugin. The supported version that is affected is 12.2.1.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterpri...

CVE-2021-2134

CVE-2021-2134 affects Oracle Enterprise Manager for Fusion Middleware (FMW Control Plugin) in version 12.2.1.4. The underlying issue allows a low-privilege, network-accessing attacker over HTTP to cause a hang or frequent crash (DoS). Documented impact is a complete DoS with availability impact; ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.3.35 jenkins-2-plugins security update

An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.4.z jenkins-2-plugins security update

An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 7 : OpenShift Container Platform 4.4.z jenkins-2-plugins (RHSA-2020:2737)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2737 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

CVE-2020-2134

Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies...

CVE-2020-2134

CVE-2020-2134 relates to the Jenkins Script Security Plugin (versions up to 1.70) where sandbox protections could be bypassed by crafted constructor calls and bodies, enabling arbitrary code execution in the Jenkins controller JVM. The issue is documented in public advisories (GHSA/GHSA-GJ3Q-P8CM...

CVE-2020-2134

Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies...

CVE-2019-2134

CVE-2019-2134 affects Android due to an out-of-bounds write in phFriNfc_ExtnsTransceive (phNxpExtns_MifareStd.cpp) caused by integer overflow. Impact: local privilege escalation with HIGH confidentiality/integrity/availability implications; exploitation requires user interaction and local access....

CVE-2018-2134

CVE-2018-2134 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-2134

...

CVE-2016-2134

CVE-2016-2134 is rejected/not used; this entry does not correspond to an active vulnerability per its Description.

CVE-2017-2134

CVE-2017-2134 is an XSS vulnerability in ASSETBASE 8.0 and earlier (CWE-79). The issue allows remote attackers to inject arbitrary web script or HTML, potentially executing in the browser of an administrator. The root cause and affected component are documented in multiple connected records (ASSE...