SUSE: Security Advisory (SUSE-SU-2017:2142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : Ansible security update (2.7.18) (Moderate) (RHSA-2020:2142)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2142 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

Debian DLA-2142-1 : slirp security update

It was discovered that there was a buffer overflow vulnerability in slirp, a SLIP/PPP emulator for using a dial up shell account. This was caused by the incorrect usage of return values from snprintf3. For Debian 8 'Jessie', this issue has been fixed in slirp version 1:1.0.17-7+deb8u2. We recomme...

CVE-2020-2142

A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds...

CVE-2020-2142

A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds...

CVE-2020-2142

CVE-2020-2142 relates to the Jenkins P4 Plugin. The issue is a missing permission check in the P4 Plugin versions 1.10.10 and earlier, allowing attackers with Overall/Read permission to trigger builds (and, per some advisories, potentially add labels in Perforce). Affected component: Jenkins P4 P...

DEBIAN-CVE-2012-2142

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator...

CVE-2012-2142

CVE-2012-2142 affects Poppler up to version 0.21.4, where the error function in Error.cc can be abused by a crafted PDF containing an escape sequence for a terminal emulator to execute arbitrary commands. The vulnerability arises from improper handling of escape sequences in PDFs, enabling potent...

CVE-2019-2142

The CVE-2019-2142 entry affects Android 10, specifically the libxaac library. The vulnerability is an information-disclosure flaw caused by a missing bounds check that could trigger an out-of-bounds read. Exploitation requires user interaction, and successful exploitation could disclose partial t...

CVE-2018-2142

CVE-2018-2142 entry is rejected/not used; not an active vulnerability entry.

CVE-2018-2142

...

RHEL 7 : openshift (RHSA-2016:1038)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:1038 advisory. OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud...

CVE-2015-2142

Multiple cross-site request forgery CSRF vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to 1 hijack the authentication of users for requests that cause an unspecified impact via the id parameter to project.php, 2 hijack the authentication of users for...

CVE-2015-2142

Issuetracker phpBugTracker, versions prior to 1.7.0, contains multiple CSRF vulnerabilities that allow remote authenticated users to hijack authentication of other users via various parameter tampering (id, group_id, status_id, severity_id, priority_id, os_id, database_id, site_id) across project...

CVE-2017-2142

CVE-2017-2142 is confirmed to affect the WN-G300R3 router (firmware versions 1.03 and earlier). The root cause is a stack-based buffer overflow in the device’s firmware, allowing a remote entity to execute arbitrary OS commands on the product if they can access it. The affected product is a wirel...

CentOS Update for bind97 CESA-2016:2142 centos5

Check the version of bind97 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882586";...

CentOS 5 : bind97 (CESA-2016:2142)

"An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2016-2142

Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file...

Moderate: Red Hat Security Advisory: openshift security update

Updated openshift packages that fix one security issue are now available for Red Hat OpenShift Enterprise 3.1. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle Solaris Third-Party Patch Update : xpdf (cve_2012_2142_arbitrary_code)

The remote Solaris system is missing necessary patches to address security updates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Oracle Third Party software advisories. include'deprecatednasllevel.inc';...