RHEL 7 / 8 : OpenShift Container Platform 4.3.38 jenkins and openshift (RHSA-2020:3808)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3808 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

CVE-2020-2229

A flaw was found in Jenkins in versions prior to 2.251 and LTS 2.235.3. Tooltip values, which are not properly escaped, can be contributed by plugins and use user-specified values. This results in a potential stored cross-site scripting XSS vulnerability. This highest threat from this vulnerabili...

FreeBSD : jenkins -- multiple vulnerabilities (eef0d2d9-78c0-441e-8b03-454c5baebe20)

Jenkins Security Advisory : DescriptionHigh SECURITY-1955 / CVE-2020-2229 Stored XSS vulnerability in help icons High SECURITY-1957 / CVE-2020-2230 Stored XSS vulnerability in project naming strategy High SECURITY-1960 / CVE-2020-2231 Stored XSS vulnerability in 'Trigger builds remotely' C Tenabl...

Jenkins < 2.252, < 2.235.4 Multiple XSS Vulnerabilities - Linux

Jenkins is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-2229

Jenkins CVE-2020-2229 is a stored XSS vulnerability caused by failing to escape tooltip content in help icons. Affected products/versions: Jenkins 2.251 and earlier, and LTS 2.235.3 and earlier. Impact: stored XSS via plugin-contributed tooltip values. Mitigation: upgrade to Jenkins 2.252 or LTS ...

CVE-2019-2229

CVE-2019-2229 affects Android (Android-8.0/8.1/9/10) where BaseWidgetProvider.java::updateWidget can leak user data due to a missing permission check. The vulnerability enables local information disclosure without additional execution privileges and does not require user interaction. Exploitation...

RHEL 7 : spice-gtk (RHSA-2019:2229)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2229 advisory. The spice-gtk packages provide a GIMP Toolkit GTK+ widget for Simple Protocol for Independent Computing Environments SPICE clients. Both Virtual...

CVE-2018-2229

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-2229

...

CVE-2017-2229

CVE-2017-2229: Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows privilege escalation via a Trojan horse DLL in an untrusted directory. Root cause: insecure DLL search path (CWE-427) related to the installer/load process. Affected product: D...

CVE-2011-2229

This CVE entry is rejected/not used as stated in the Initial Description.

CVE-2011-2229

...

Ubuntu: Security Advisory (USN-2229-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : GnuTLS vulnerability (USN-2229-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2229-1 advisory. Joonas Kuorilehto discovered that GnuTLS incorrectly handled Server Hello messages. A malicious remote server or a machine-in-the-middle could use this issue to...

CVE-2013-2229

...

CVE-2013-2229

CVE-2013-2229 is rejected and not an active vulnerability entry.

Tembria Server Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities

The host is running Tembria Server Monitor and is prone to cross-site scripting and information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtembriaservermultxssninfodiscvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Tembria Server Multiple Cross-Site Scripting and Information...

openSUSE Security Update : moodle (openSUSE-SU-2010:0365-1)

Moodle was prone to several Cross-Site Scripting XSS vulnerabilities CVE-2010-2228, CVE-2010-2229, CVE-2010-2230, CVE-2010-2231. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-2691. Th...

CVE-2010-2229

Multiple cross-site scripting XSS vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2010-2229

Moodle exposed XSS in blog/index.php prior to versions 1.8.13 and 1.9.x prior to 1.9.9. Remote attackers could inject arbitrary scripts/HTML via unspecified parameters, potentially affecting users. Public advisories (CVE-2010-2229) are corroborated across multiple sources (Debian DSA-2115/DSA-211...