CVE-2020-2235

A cross-site request forgery CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkin...

Debian: Security Advisory (DLA-2235-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-20223

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

Design/Logic Flaw

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

CVE-2019-20223

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

CVE-2019-2235

CVE-2019-2235 affects Qualcomm Snapdragon platforms listed in the vulnerability details. A buffer overflow occurs when the emulated RPMB is used, caused by sector-size assumptions in the trusted application (TA) rollback protection logic. The vulnerability impacts confidentiality, integrity, and ...

CVE-2018-2235

...

CVE-2018-2235

CVE-2018-2235 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-2235

CVE-2017-2235 affects Toshiba Home gateway HEM-GW16A and HEM-GW26A. The flaw is improper access control that allows an attacker to bypass restrictions and change the administrator password. Public details identify firmware versions HEM-GW16A-FW-V1.2.0 and earlier and HEM-GW26A-FW-V1.2.0 and earli...

CVE-2011-2235

This CVE entry is rejected/not used; it does not represent an active vulnerability entry.

CVE-2015-2235

CVE-2015-2235 is rejected and not used; this entry does not represent an active vulnerability.

CVE-2015-2235

...

Ubuntu: Security Advisory (USN-2235-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2235

Cross-site scripting XSS vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form...

CVE-2014-2235

CVE-2014-2235 is a cross-site scripting (XSS) vulnerability in Askbot prior to 0.7.49. The issue allows remote attackers to inject arbitrary web script or HTML via the question search form. Affected software: Askbot

CVE-2012-2235

SiT! (Support Incident Tracker) is affected by a cross-site scripting (XSS) vulnerability in versions up to 3.65, triggered by the id parameter passed to index.php. The issue arises because the parameter is processed in an error message without proper sanitization, enabling remote attackers to in...

Debian Security Advisory DSA 2235-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 2235-1. OpenVAS Vulnerability Test $Id: deb22351.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2235-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2010-2235

templateapi.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a...

CVE-2010-2235

CVE-2010-2235 affects Cobbler: template_api.py used in Cobbler prior to 2.0.7 allows remote authenticated admins to execute arbitrary Python code via a crafted kickstart template, due to the Cheetah template engine not being restricted. This is a code injection issue in the template processing pa...

SuSE 11 Security Update : krb5 (SAT Patch Number 2235)

Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...