42 matches found
DEBIAN-CVE-2020-21687
Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...
CVE-2020-21687
Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...
CVE-2020-21687
Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...
CVE-2020-21687
CVE-2020-21687 corresponds to a buffer overflow in the scan function of nasm (stdscan.c) in version 2.15rc0. The vulnerability allows a remote attacker to cause a denial of service by processing a crafted ASM file. Public documents in connected sources consistently reference the same description ...
CVE-2023-21687
creationtimestamp| type| source ---|---|--- 2023-02-14 22:35:50+00:00| seen| https://t.me/cibsecurity/58145...
CVE-2023-21687
HTTP.sys Information Disclosure Vulnerability...
CVE-2023-21687
HTTP.sys Information Disclosure Vulnerability...
CVE-2023-21687 HTTP.sys Information Disclosure Vulnerability
...
CVE-2023-21687
CVE-2023-21687 affects Microsoft Windows HTTP.sys, enabling information disclosure with a local attack vector (CVSS: 3.1, Privileges Required: Low, User Interaction: None). Affected products include Windows HTTP.sys on Windows 11 and Windows Server 2022 families. Public details from NVD/MSRC indi...
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
The agent-to-controller security subsystem limits which files on the Jenkins controller can be accessed by agent processes. Multiple vulnerabilities in the file path filtering implementation of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allow agent processes to read and write arbitrary...
GHSA-3Q84-VRVX-RFVF Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
The agent-to-controller security subsystem limits which files on the Jenkins controller can be accessed by agent processes. Multiple vulnerabilities in the file path filtering implementation of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allow agent processes to read and write arbitrary...
CVE-2022-21687 Command injection in gh-ost
gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus...
CVE-2022-21687 Command injection in gh-ost
gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus...
CVE-2022-21687
CVE-2022-21687 affects the gh-ost project for MySQL. Versions prior to 1.1.3 are vulnerable due to improper sanitization of the -database parameter, enabling an attacker with host access or who can coerce an admin into running a malicious gh-ost command to cause arbitrary file reads on the target...
Important: Red Hat Security Advisory: OpenShift Container Platform 3.11.569 security update
Red Hat OpenShift Container Platform release 3.11.569 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.6.51 packages and security update
Red Hat OpenShift Container Platform release 4.6.51 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.8.22 security update
Red Hat OpenShift Container Platform release 4.8.22 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...
FreeBSD : jenkins -- multiple vulnerabilities (2bf56269-90f8-4a82-b82f-c0e289f2a0dc)
Jenkins Security Advisory : DescriptionCritical SECURITY-2455 / CVE-2021-21685, CVE-2021-21686, CVE-2021-21687, CVE-2021-21688, CVE-2021-21689, CVE-2021-21690, CVE-2021-21691, CVE-2021-21692, CVE-2021-21693, CVE-2021-21694, CVE-2021-21695 Multiple vulnerabilities allow bypassing path filtering of...
Jenkins < 2.303.3, < 2.319 Multiple Vulnerabilities - Linux
Jenkins is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...