CVE-2020-2212

Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system or read permissions on the system configuration...

CVE-2020-2212

CVE-2020-2212 affects Jenkins GitHub Coverage Reporter Plugin ≤1.8, with secrets stored unencrypted in the global configuration on the Jenkins master. The GitHub access token is saved in io.jenkins.plugins.gcr.PluginConfiguration.xml and can be viewed by anyone with master-file-system access or r...

RHEL 7 : ruby (RHSA-2020:2212)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2212 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

2212-opt.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1116135 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting 2212-opt.ru website and it...

CVE-2019-2212

In poissondistribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID:...

CVE-2019-2212

In poissondistribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID:...

CVE-2019-2212

CVE-2019-2212 concerns an out-of-bounds read in the Poisson_distribution of random, enabling local information disclosure without extra privileges or user interaction. Affected products/versions (from provided docs): Android 8.0–10. The root cause is a read that can leak information from memory i...

CVE-2018-2212

...

CVE-2018-2212

CVE-2018-2212 is rejected/not used; this entry does not represent an active vulnerability.

blackdoctor.org XSS vulnerability

Vulnerable URL: http://blackdoctor.org/physician-directory/?city=aaa%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E&directory-search;=Search=NYzip=10001 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 221...

CVE-2017-2212

CVE-2017-2212 affects TKY2JGD1379.EXE (TKY2JGD version 1.3.79). The untrusted search path vulnerability (CWE-427) in the installer may allow an attacker to gain privileges by placing a malicious DLL in a directory searched by the installer, enabling arbitrary code execution with the caller’s priv...

JVN#52691241: Multiple installers of the software provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries

Multiple installers of the software provided by Geospatial Information Authority of Japan GSI contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer...

CVE-2016-2212

The getOrderByStatusUrlKey function in the MageRssHelperOrder class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edition before 1.14.2.3 and Magento Community Edition before 1.9.2.3 allows remote attackers to obtain sensitive order information via the orderid in a JSON object ...

CVE-2016-2212

The getOrderByStatusUrlKey function in the MageRssHelperOrder class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edition before 1.14.2.3 and Magento Community Edition before 1.9.2.3 allows remote attackers to obtain sensitive order information via the orderid in a JSON object ...

CVE-2016-2212

The CVE concerns Magento RSS feed information disclosure via the method getOrderByStatusUrlKey in Mage_Rss_Helper_Order. In affected Magento EE before 1.14.2.3 and CE before 1.9.2.3, a remote attacker can obtain sensitive order information by supplying a base64-encoded JSON object in the data par...

Magento 1.9.2.2 RSS Feed Information Disclosure

------------------------------------------------------------------ Magento load$data'orderid'; 94. if $order-getId 95. && $order-getIncrementId == $data'incrementid' 96. && $order-getCustomerId == $data'customerid' 97. 98. return $order; 99. 100. 101. return null; 102. User input passed through t...

Gentoo Security Advisory GLSA 201504-04

Gentoo Linux Local Security Checks GLSA 201504-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-2212

CVE-2015-2212 is rejected/not used; use CVE-2015-5623 instead.

WordPress post Request Privilege Escalation (CVE-2015-2212; CVE-2015-5623)

A privilege escalation vulnerability has been found in WordPress Post Request. An authenticated remote attacker may leverage this vulnerability to gain access From Subscriber to certain Editor capabilities of the vulnerable server...

Fedora Update for xen FEDORA-2015-3721

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...