89 matches found
CVE-2020-2192
A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels...
CVE-2020-2192
A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels...
CVE-2020-2192
The CVE-2020-2192 entry covers a CSRF vulnerability in Jenkins Swarm Plugin (Self-Organizing Swarm Plug-in Modules) up to version 3.20. The issue arises because the plugin exposes API endpoints that add or remove agent labels and, in 3.20 and earlier, do not perform regular permission checks or r...
Debian: Security Advisory (DLA-2192-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2192
In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...
CVE-2019-2192
In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...
CVE-2019-2192
CVE-2019-2192 corresponds to a local elevation of privilege in the Android Framework (SliceProvider.java). Affected: Android 9 and 10. Description states a permissions bypass due to improper input validation, enabling a local attacker to gain additional permissions without user interaction. Impac...
CVE-2018-2192
This CVE entry is rejected/not used and does not represent an active vulnerability.
SUSE SLES12 Security Update : java-1_6_0-ibm (SUSE-SU-2015:2192-1) (Bar Mitzvah) (FREAK)
This update for java-160-ibm fixes the following issues : - Version update to 6.0-16.15 bsc955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882...
Oracle Linux 7 : mariadb (ELSA-2017-2192)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2192 advisory. - Rebase to 5.5.56 That release also fixes the following security issues: CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238 CVE-2017-3243...
RedHat Update for git RHSA-2017:2004-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-2192
The CVE-2017-2192 issue affects Sharp RW-5100 family tools used to verify execution environment on Windows 7 (1.1.0.0) and Windows 8.1 (1.2.0.0). The vulnerability is an untrusted DLL search path (CWE-427) that can allow arbitrary code execution with the user’s privileges due to loading a Trojan ...
CVE-2016-2192
PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...
CVE-2016-2192
PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...
CVE-2016-2192
CVE-2016-2192 affects PostgreSQL PL/Java. Before 1.5.0, remote authenticated users could alter type mappings for types they do not own due to improper permission checks. Publicly documented impact is limited to changing mappings, with the vulnerability in PL/Java versions up to 1.4.x (pre-1.5.0)....
JVN#51274854: Multiple software for Sharp IC Card Reader/Writer Devices may insecurely load Dynamic Link Libraries
The tool to verify execution environment and the driver installer for IC Card Reader/Writer devices provided by Sharp Corporation contain an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege o...
Gentoo Security Advisory GLSA 201510-03
Gentoo Linux Local Security Checks GLSA 201510-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Oracle: Security Advisory (ELSA-2011-0918)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2192
Wireshark 1.12.x before 1.12.4 is affected by CVE-2015-2192. The vulnerability is an integer overflow in the SCSI OSD dissector (epan/dissectors/packet-scsi-osd.c) function dissect_osd2_cdb_continuation, which allows remote attackers to cause a denial of service (infinite loop) by sending a craft...