CVE-2022-2224

The CVE-2022-2224 entry concerns the WordPress plugin Gallery for Social Photo. Several connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability due to improper nonce validation in the function gifeed_duplicate_feed, allowing unauthenticated attackers to duplicate existing post...

CVE-2021-2224

CVE-2021-2224 affects Oracle E-Business Suite, Compensations Workbench component (versions 12.1.1–12.1.3). A low-privilege, network-accessible attacker can exploit via HTTP to read/modify data across Oracle Compensation Workbench data; impact includes unauthorized creation, deletion or modificati...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.3.40 jenkins-2-plugins security update

Red Hat OpenShift Container Platform release 4.3.40 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...

RHEL 7 : OpenShift Container Platform 4.4.20 jenkins-2-plugins (RHSA-2020:3625)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3625 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

Important: Red Hat Security Advisory: OpenShift Container Platform 3.11 security update

An update for jenkins, jenkins-2-plugins, openshift-ansible, and python-rsa is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 7 : OpenShift Container Platform 3.11 (RHSA-2020:3541)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3541 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.5.6 security update

An update for jenkins-2-plugins and python-rsa is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2020-2224

The CVE-2020-2224 issue affects Jenkins Matrix Project Plugin (versions 1.16 and earlier). The root cause is failure to escape node names shown in tooltips on the overview page for builds with a single axis, enabling stored cross-site scripting. Impact is user-visible XSS for users with Agent/Con...

Debian: Security Advisory (DLA-2224-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2224

...

CVE-2019-2224

CVE-2019-2224 is rejected/not used; refer to CVE-2019-15140.

CVE-2018-2224

...

CVE-2018-2224

CVE-2018-2224 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-2224

The CVE-2017-2224 vulnerability affects the WordPress plugin Event Calendar WD (Web-Dorado). It is a cross-site scripting (XSS) flaw in versions prior to 1.0.94 (notably

CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2224

CVE-2016-2224 affects the C library uClibc-ng: the __decode_dotted function in libc/inet/resolv.c is vulnerable in builds before 1.0.12, allowing remote DNS servers to trigger a denial of service (infinite loop) by sending specially crafted DNS replies with compressed items. Impact is a network-e...

Debian DLA-561-1 : uclibc security update

Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible denial of service via a specially crafted DNS reply that could cause an infinite loop...

[SECURITY] [DLA 561-1] uclibc security update

Package : uclibc Version : 0.9.32-1+deb7u1 CVE ID : CVE-2016-2224 CVE-2016-2225 CVE-2016-6264 Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible...

Oracle: Security Advisory (ELSA-2013-1166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2013-1166)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...