71 matches found
RHEL 7 : OpenShift Container Platform 4.5.13 jenkins (RHSA-2020:3841)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3841 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.5.13 jenkins security update
An update for jenkins is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RHEL 7 / 8 : OpenShift Container Platform 4.3.38 jenkins and openshift (RHSA-2020:3808)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3808 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
CVE-2020-2229
A flaw was found in Jenkins in versions prior to 2.251 and LTS 2.235.3. Tooltip values, which are not properly escaped, can be contributed by plugins and use user-specified values. This results in a potential stored cross-site scripting XSS vulnerability. This highest threat from this vulnerabili...
Jenkins < 2.252, < 2.235.4 Multiple XSS Vulnerabilities - Linux
Jenkins is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
FreeBSD : jenkins -- multiple vulnerabilities (eef0d2d9-78c0-441e-8b03-454c5baebe20)
Jenkins Security Advisory : DescriptionHigh SECURITY-1955 / CVE-2020-2229 Stored XSS vulnerability in help icons High SECURITY-1957 / CVE-2020-2230 Stored XSS vulnerability in project naming strategy High SECURITY-1960 / CVE-2020-2231 Stored XSS vulnerability in 'Trigger builds remotely' C Tenabl...
CVE-2020-2229
Jenkins CVE-2020-2229 is a stored XSS vulnerability caused by failing to escape tooltip content in help icons. Affected products/versions: Jenkins 2.251 and earlier, and LTS 2.235.3 and earlier. Impact: stored XSS via plugin-contributed tooltip values. Mitigation: upgrade to Jenkins 2.252 or LTS ...
CVE-2019-2229
CVE-2019-2229 affects Android (Android-8.0/8.1/9/10) where BaseWidgetProvider.java::updateWidget can leak user data due to a missing permission check. The vulnerability enables local information disclosure without additional execution privileges and does not require user interaction. Exploitation...
RHEL 7 : spice-gtk (RHSA-2019:2229)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2229 advisory. The spice-gtk packages provide a GIMP Toolkit GTK+ widget for Simple Protocol for Independent Computing Environments SPICE clients. Both Virtual...
CVE-2018-2229
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-2229
CVE-2017-2229: Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows privilege escalation via a Trojan horse DLL in an untrusted directory. Root cause: insecure DLL search path (CWE-427) related to the installer/load process. Affected product: D...
CVE-2011-2229
This CVE entry is rejected/not used as stated in the Initial Description.
Ubuntu: Security Advisory (USN-2229-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : GnuTLS vulnerability (USN-2229-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2229-1 advisory. Joonas Kuorilehto discovered that GnuTLS incorrectly handled Server Hello messages. A malicious remote server or a machine-in-the-middle could use this issue to...
CVE-2013-2229
CVE-2013-2229 is rejected and not an active vulnerability entry.
Tembria Server Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities
The host is running Tembria Server Monitor and is prone to cross-site scripting and information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtembriaservermultxssninfodiscvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Tembria Server Multiple Cross-Site Scripting and Information...
openSUSE Security Update : moodle (openSUSE-SU-2010:0365-1)
Moodle was prone to several Cross-Site Scripting XSS vulnerabilities CVE-2010-2228, CVE-2010-2229, CVE-2010-2230, CVE-2010-2231. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-2691. Th...