85 matches found
FreeBSD : jenkins -- multiple vulnerabilities (eef0d2d9-78c0-441e-8b03-454c5baebe20)
Jenkins Security Advisory : DescriptionHigh SECURITY-1955 / CVE-2020-2229 Stored XSS vulnerability in help icons High SECURITY-1957 / CVE-2020-2230 Stored XSS vulnerability in project naming strategy High SECURITY-1960 / CVE-2020-2231 Stored XSS vulnerability in 'Trigger builds remotely' C Tenabl...
CVE-2020-2230
The CVE-2020-2230 entry corresponds to a stored XSS in the project naming strategy in Jenkins before 2.252 (and LTS before 2.235.4). Affected: Jenkins 2.251 and earlier, LTS 2.235.3 and earlier; root cause is insufficient escaping of the project naming strategy description displayed during item c...
CVE-2019-2230
CVE-2019-2230 affects Android 10 (NfcNative code in NativeNfcManager.cpp). The vulnerability arises from a use-after-free in nfcManager_routeAid and nfcManager_unrouteAid, leading to possible memory reuse and remote information disclosure without extra user interaction. Connected sources confirm ...
CVE-2015-2230
creationtimestamp| type| source ---|---|--- 2019-05-31 00:34:16+00:00| seen| https://t.me/cibsecurity/4612...
CVE-2015-2230
Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console...
CVE-2015-2230
CVE-2015-2230 affects Synacor Zimbra Collaboration Server 8.x prior to 8.7.0, where the admin console is vulnerable to a reflected cross‑site scripting (XSS) flaw. The issue arises from improper handling of user-supplied input in the admin console, allowing an attacker to execute client-side scri...
SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2018:2230-1)
This update for clamav to version 0.100.1 fixes the following issues: The following security vulnerabilities were addressed : - CVE-2018-0360: HWP integer overflow, infinite loop vulnerability bsc1101410 - CVE-2018-0361: PDF object length check, unreasonably long time to parse relatively small fi...
CVE-2017-2230
The CVE-2017-2230 issue affects the Douro Kouji Kanseizutou Check Program (Ver3.1 and earlier). Multiple connected records describe an insecure DLL search path that can be exploited to load a Trojan DLL, enabling arbitrary code execution. Impact is noted as privilege escalation/execution for the ...
CVE-2016-2230
OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session...
CVE-2016-2230
CVE-2016-2230 affects OpenELEC and RasPlex, where the root account has a hardcoded password. This enables remote attackers to access via SSH with high impact (C, I, A likely affected) as indicated by the CVSS metrics in the records. Connected sources corroborate the existence of default credentia...
CVE-2014-2230
OpenX CVE-2014-2230 affects OpenX 2.8.10 and earlier. The vulnerability is an open redirect in the header function used by adclick.php (and related ck.php), where user-controlled dest or _maxdest URL parameters can be redirected to arbitrary sites via MAX_redirect without proper URL validation. I...
OpenX 2.8.10 Open Redirect
Exploit Title: OpenX Open Redirect Vulnerability Product: OpenX Vendor: OpenX Vulnerable Versions: 2.8.10 and probably prior Tested Version: 2.8.10 Advisory Publication: OCT 8, 2014 Latest Update: OCT 8, 2014 Vulnerability Type: Open Redirect CWE-601 CVE Reference: CVE-2014-2230 Risk Level: Low...
Ubuntu 14.04 LTS : chkrootkit vulnerability (USN-2230-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2230-1 advisory. Thomas Stangner discovered that chkrootkit incorrectly quoted certain values. A local attacker could use this issue to execute arbitrary code when chkrootkit is r...
CVE-2013-2230
The provided data confirms CVE-2013-2230 affects the libvirt qemu driver (qemu/qemu_driver.c) in libvirt versions prior to 1.1.1. It enables remote authenticated users to trigger a denial of service (daemon crash) via unspecified vectors tied to multiple events registration. The available details...
Security fix for the ALT Linux 8 package libvirt version 1.1.1-alt1
Aug. 8, 2013 Alexey Shabalin 1.1.1-alt1 - 1.1.1 - fixed CVE-2013-2230, CVE-2013-4153, CVE-2013-4154...
CVE-2012-2230
CVE-2012-2230 affects Cloudera Manager 3.7.x (before 3.7.5) and Service/Configuration Manager 3.5 when Kerberos is not enabled. The vulnerability arises from how taskcontroller.cfg is installed, allowing remote authenticated users to impersonate arbitrary user accounts via unspecified vectors (a ...
CVE-2011-2230: Undefined Security Weakness
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1 allows remote attackers to affect availability via unknown vectors...
Debian Security Advisory DSA 2230-1 (qemu-kvm)
The remote host is missing an update to qemu-kvm announced via advisory DSA 2230-1. OpenVAS Vulnerability Test $Id: deb22301.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2230-1 qemu-kvm Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian DSA-2230-1 : qemu-kvm - several vulnerabilities
Two vulnerabilities have been discovered in KVM, a solution for full virtualization on x86 hardware : - CVE-2011-0011 Setting the VNC password to an empty string silently disabled all authentication. - CVE-2011-1750 The virtio-blk driver performed insufficient validation of read/write I/O from th...