CVE-2020-2255

A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

CVE-2020-2255

A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

CVE-2020-2255

CVE-2020-2255: Jenkins Blue Ocean Plugin 1.23.2 and earlier has a missing permission check in HTTP endpoints used for connection tests. This allows attackers with Overall/Read permission to connect to an attacker-specified URL from the vulnerable instance. The issue is documented across multiple ...

CVE-2020-2255

A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

CVE-2013-2255

OpenStack CVE-2013-2255 affects HTTPSConnections in Keystone (2013) and OpenStack Compute (2013.1), and possibly other OpenStack components. Root cause: server-side SSL certificate validation is not performed, allowing potential impersonation or man-in-the-middle scenarios where untrusted certifi...

CVE-2019-2255

CVE-2019-2255 describes a vulnerability where an unprivileged user can craft a bitstream that causes code execution in Qualcomm Snapdragon components (e.g., Snapdragon Auto, Compute, Connectivity, and related SoCs across multiple devices). The root cause is stated as manipulating the bitstream pa...

CVE-2019-2255

An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2018-2255

CVE-2018-2255 entry is rejected/not used and does not represent an active vulnerability.

JVN#63564682: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Denial-of-service DoS vulnerability in the application menu's edit function CWE-20 - CVE-2017-2254 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H| Base Score: 5.5 CVSS...

CVE-2015-2255

Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service board reset via vectors involving a large amount of traffic from the GE port to the FE port...

CVE-2015-2255

Huawei AR1220 routers with software before V200R005SPH006 are affected by CVE-2015-2255. The vulnerability is a resource-management flaw where an attacker can trigger a denial of service (board reset) by sending massive traffic from the GE port to the FE port on the main board. Impact is a target...

CVE-2016-2255

...

CVE-2016-2255

CVE-2016-2255 entry is rejected/not used per the initial description.

Security Advisory-Resource Management Vulnerability in the AR1220

Under Specifically configurations in the AR1220, An attacker sends massive traffic to the FE port from the GE port on the main board. As a result, the interface board resets unexpectedly. Vulnerability ID: HWPSIRT-2014-1298. This Vulnerability has been assigned Common Vulnerabilities and Exposure...

Ubuntu 14.04 LTS : OpenStack Neutron vulnerabilities (USN-2255-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2255-1 advisory. Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Neutron did not properly set up its sudo configuration. If a different flaw was found...

OpenStack多个产品SSL证书校验漏洞(CVE-2013-2255)

CVE ID:CVE-2013-2255 OpenStack Computer提供给一个组织云的工具,其中的功能包括运行虚拟机实例, 管理网络以及通过用户和项目来控制对云的访问OpenStack keystone是openstack中用于身份验证的项目，任何服务请求需要经过它的验证获得服务的endpoint OpenStack Computer/keystone在连接服务器时没有校验所提供的SSL证书的合法性，允许远程攻击者利用漏洞伪造合法服务器，进行中间人等攻击 0 OpenStack Compute Nova 2013.x OpenStack Keystone 2013.x 厂商解决...

CVE-2011-2255

Technical details about CVE-2011-2255 are not publicly available in the provided documents. Monitor for updates; no concrete affected products, root cause, or fixes are described here.

Debian Security Advisory DSA 2255-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 2255-1. OpenVAS Vulnerability Test $Id: deb22551.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2255-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2255-1 : libxml2 - buffer overflow

Chris Evans discovered that libxml was vulnerable to buffer overflows, which allowed a crafted XML input file to potentially execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

CVE-2010-2255

SQL injection vulnerability in the BF Survey Pro combfsurveypro component before 1.3.1, BF Survey Pro Free combfsurveyprofree component 1.2.6, and BF Survey Basic component before 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. NOTE:...