CVE-2020-2145

CVE-2020-2145 affects Jenkins Zephyr Enterprise Test Management Plugin (versions ≤ 1.9.1). The vulnerability stems from storing the Zephyr password in plaintext on the Jenkins master filesystem, specifically in the global configuration file ZeeReporter.xml, allowing users with access to the contr...

Huawei EulerOS: Security Advisory for mod_auth_mellon (EulerOS-SA-2019-2388)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for mod_auth_mellon (EulerOS-SA-2019-2009)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : mod_auth_mellon (EulerOS-SA-2019-2388)

According to the versions of the modauthmellon package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - modauthmellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a...

CVE-2019-2145

CVE-2019-2145 is a vulnerability in the Android libxaac library (Android-10) causing an information-disclosure via an out-of-bounds read due to missing bounds checks. The exploit requires user interaction and could allow partial confidentiality impact, with higher impact if exploited in context. ...

RHEL 7 : gvfs (RHSA-2019:2145)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2145 advisory. GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol FTP, Secure...

CVE-2018-2145

...

CVE-2015-2145

Issuetracker phpBugTracker contains multiple XSS flaws in versions prior to 1.7.0. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through unspecified parameters, potentially affecting any pages that render user-supplied input. The root cause is improper sanitiza...

CVE-2017-2145

CVE-2017-2145: Cybozu Garoon 4.0.0–4.2.4 is affected by a session-fixation vulnerability. An attacker can perform arbitrary operations via unspecified vectors, potentially with the logged-in user’s privileges. Affected product: Cybozu Garoon (versions 4.0.0–4.2.4). Exploitation details are not fu...

CVE-2016-2145

The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows remote attackers to cause a denial of service segmentation fault and process crash via a crafted POST data...

CVE-2016-2145

CVE-2016-2145 affects mod_auth_mellon before 0.11.1: am_read_post_data does not check ap_get_client_block for errors, enabling DoS via crafted POST data (segfaults/process crashes). Affected products/versions include Red Hat/EulerOS advisories; recommended mitigation is upgrading to at least 0.13...

Gentoo Security Advisory GLSA 201310-01

Gentoo Linux Local Security Checks GLSA 201310-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

RHEL 5 : Red Hat Enterprise MRG Messaging 2.2 update (Moderate) (RHSA-2012:1277)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1277 advisory. - qpid-cpp: not closing incomplete connections exhausts file descriptors, leading to DoS CVE-2012-2145 - qpid-cpp-server-cluster: unauthoriz...

openSUSE Security Update : libvmtools-devel (openSUSE-SU-2011:0617-1)

This update of open-vm-tools fixes the following vulnerabilities which allowed an attacker to gain root privileges within the guest system : - CVE-2011-1681 - CVE-2011-2146 - CVE-2011-1787 - CVE-2011-2145 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE Security Update : libvmtools-devel (openSUSE-SU-2011:0617-1)

This update of open-vm-tools fixes the following vulnerabilities which allowed an attacker to gain root privileges within the guest system : - CVE-2011-1681 - CVE-2011-2146 - CVE-2011-1787 - CVE-2011-2145 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE Security Update : perl-Module-Signature (openSUSE-SU-2013:1178-1)

perl-Module-Signature was updated to 0.73, fixing bugs and security issues : Security fix for code execution in signature checking : - fix for bnc828010 CVE-2013-2145 - Properly redo the previous fix using File::Spec-filenameisabsolute. - Changes for 0.72 - Wed Jun 5 23:19:02 CST 2013 - Only allo...

CVE-2014-2145

Cisco Unity Connection contains a directory traversal vulnerability in its messaging API (CVE-2014-2145). An authenticated, remote attacker can read arbitrary files by exploiting insufficient input filtering and relaxed restrictions on file types beyond .wav, via the audio/x-wav MIME type. Impact...

DEBIAN-CVE-2013-2145

The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/...

CVE-2013-2145

The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/...

CVE-2013-2145

The CVE-2013-2145 issue affects the Perl Module::Signature (cpansign verify) prior to version 0.72. A specially crafted SIGNATURE file containing a “special unknown cipher” can cause Digest/ references to be loaded via an untrusted path, allowing arbitrary code execution when cpansign -verify run...