121 matches found
CVE-2020-2172
Vulnerability summary: Jenkins Code Coverage API Plugin (versions 1.1.4 and earlier) is affected by an XXE flaw caused by an unconfigured XML parser. This could allow a user who supplies input files for the “Publish Coverage Report” step to trigger external entities, potentially exposing secrets ...
CVE-2020-2172
Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2019-2172
In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113035224...
CVE-2019-2172
CVE-2019-2172 is a information-disclosure flaw in the Android 10 libxaac component caused by uninitialized data. The vulnerability could allow access to information without extra execution privileges, with the attack requiring user interaction. Affected product: Android 10 (libxaac in Android). T...
CVE-2018-2172
This CVE-2018-2172 entry is rejected and not used as an active vulnerability entry.
CVE-2017-2172
CVE-2017-2172 is a cross-site scripting vulnerability in Cybozu KUNAI for Android versions 3.0.0–3.0.6. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors within the mobile client. Root cause is CWE-79 (XSS); impact is arbitrary script execution in the...
CVE-2016-2172
CVE-2016-2172 entry is rejected/not used and does not represent an active vulnerability.
Oracle: Security Advisory (ELSA-2007-0347)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2172
DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API...
CVE-2015-2172
CVE-2015-2172 affects DokuWiki prior to 2014-05-05d and prior to 2014-09-29c, where ACL plugin permission checks are insufficient in the XMLRPC API. This allows remote authenticated users to elevate privileges by adding or deleting ACL rules via the XMLRPC interface. Root cause: ACL plugin permis...
Fedora Update for dokuwiki FEDORA-2015-3186
The remote host is missing an update for the Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 20 : dokuwiki-0-0.24.20140929c.fc20 (2015-3211)
This update fixes CVE-2015-2172 - There's a security hole in the ACL plugins remote API component. The plugin failes to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also has permissions to set up their own...
Fedora 22 : dokuwiki-0-0.24.20140929c.fc22 (2015-3079)
This update fixes CVE-2015-2172 - There's a security hole in the ACL plugins remote API component. The plugin failes to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also has permissions to set up their own...
Fedora 21 : dokuwiki-0-0.24.20140929c.fc21 (2015-3186)
This update fixes CVE-2015-2172 - There's a security hole in the ACL plugins remote API component. The plugin failes to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also has permissions to set up their own...
Debian DLA-85-1 : libxml-security-java security update
James Forshaw discovered that, in Apache Santuario XML Security for Java, CanonicalizationMethod parameters were incorrectly validated: by specifying an arbitrary weak canonicalization algorithm, an attacker could spoof XML signatures. NOTE: Tenable Network Security has extracted the preceding...
Updated dokuwiki packages fix CVE-2015-2172
Updated dokuwiki package fixes security vulnerability: DokuWiki before 20140929c has a security issue in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC A...
Debian DSA-3065-1 : libxml-security-java - security update
James Forshaw discovered that, in Apache Santuario XML Security for Java, CanonicalizationMethod parameters were incorrectly validated: by specifying an arbitrary weak canonicalization algorithm, an attacker could spoof XML signatures. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[SECURITY] [DSA 3065-1] libxml-security-java security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3065-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 06, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3065-1] libxml-security-java security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3065-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 06, 2014 http://www.debian.org/security/faq -...