CVE-2020-2213

Jenkins White Source Plugin 19.1.1 and earlier stores credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission config.xml, or access to the master file system...

CVE-2020-2213

Jenkins White Source Plugin 19.1.1 and earlier stores credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission config.xml, or access to the master file system...

CVE-2020-2213

Jenkins White Source Plugin 19.1.1 and earlier stores credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission config.xml, or access to the master file system...

CVE-2020-2213

The CVE-2020-2213 case affects the Jenkins White Source Plugin: versions 19.1.1 and earlier store credentials in plain text in the global configuration file and in job config.xml on the Jenkins controller. This can expose credentials to users with Extended Read or to someone with access to the co...

CVE-2020-2213

Jenkins White Source Plugin 19.1.1 and earlier stores credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission config.xml, or access to the master file system...

Debian: Security Advisory (DLA-2213-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2213

The CVE-2013-2213 entry applies to KDE Paste Applet (kdeplasma-addons) post-4.10.5, where KRandom::random uses the GNU C Library rand()’s linear congruential generator. This weak PRNG makes it feasible for context-dependent attackers to predict output and compromise cryptographic protections as d...

CVE-2014-2213

CVE-2014-2213 : Open redirect vulnerability in POSH 3.0–3.2.1’s password reset functionality. An attacker can craft a redirect parameter to portal/scr_sendmd5.php to send users to arbitrary sites, enabling phishing. No exploitation details are provided in the documents; remediation/patch details ...

CVE-2019-2213

In binderfreetransaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

DEBIAN-CVE-2019-2213

In binderfreetransaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2019-2213

CVE-2019-2213 : A race in binder_free_transaction in binder.c can cause a use-after-free, enabling local privilege escalation without extra privileges. Exploitation is described as LOCAL with no user interaction and relies on the Android kernel’s binder subsystem; it references upstream kernel fi...

CVE-2018-2213

...

CVE-2018-2213

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-2213

Untrusted search path vulnerability in SemiDynaEXE SemiDynaEXE2008.EXE ver. 1.0.2 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2213

The CVE-2017-2213 entry concerns SemiDynaEXE2008.EXE (version 1.0.2). The vulnerability is an untrusted search path that allows privilege escalation via a Trojan horse DLL located in an unspecified directory. Affected component is the installer/executable SemiDynaEXE2008.EXE; root cause is insecu...

JVN#52691241: Multiple installers of the software provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries

Multiple installers of the software provided by Geospatial Information Authority of Japan GSI contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer...

Updated ffmpeg packages fix security vulnerabilities

Updated ffmpeg packages fix security vulnerabilities: FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming HLS M3U8 file, leading to an external HTTP request in which the URL string contains the first li...

FreeBSD : ffmpeg -- remote denial of service in JPEG2000 decoder (6ac79ed8-ccc2-11e5-932b-5404a68ad561)

FFmpeg security reports : FFmpeg 2.8.6 fixes the following vulnerabilities : CVE-2016-2213 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

DEBIAN-CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...