Jenkins Multiple Vulnerabilities (Feb 2017) - Windows

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

CVE-2017-2602

jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents SECURITY-358...

Oracle Linux 7 : mod_nss (ELSA-2016-2602)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-2602 advisory. - OpenSSL ciphers stopped parsing at +, CVE-2016-3099 1323913 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Endeca IDI ETL Server UploadFileConent Directory Traversal (CVE-2015-2602)

A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the UploadFileConent operation. A remote authenticated attacker can leverage this vulnerability to...

CVE-2015-2603

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2602

Based on connected advisories, CVE-2015-2602 affects Oracle Endeca Information Discovery Integrator ETL Server (Endeca IDI ETL Server). The vulnerability is a directory traversal in the UploadFileConent path triggered by SOAP requests, allowing a remote authenticated attacker to upload arbitrary ...

CVE-2015-2604

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

Ubuntu: Security Advisory (USN-2602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP OneView Unspecified Remote Privilege Escalation (HPSBGN03034)

The version of HP OneView installed on the remote host is 1.0 or 1.01. Such versions are potentially affected by an unspecified, remote privilege escalation vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2013-2602

CVE-2013-2602 concerns the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) version 1.0.2.0, where multiple array index errors in various Add* and TestYourself methods allow remote code execution. The vulnerability affects numerous parameters (e.g., seTokensArray, seTokensValuesAr...

CVE-2014-2602

HP OneView CVE-2014-2602 describes a remote privilege-escalation vulnerability affecting HP OneView versions 1.0 and 1.01, exploitable by remote authenticated users via unknown vectors. A fix is provided in HP OneView 1.05 and later via the Update Appliance mechanism; upgrading is advised for aff...

[security bulletin] HPSBGN03034 rev.1 - HP OneView, Remote Elevation of Privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04273152 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04273152 Version: 1 HPSBGN03034 rev....

Debian DSA-2602-1 : zendframework - XML external entity inclusion

Yury Dyachenko discovered that Zend Framework uses the PHP XML parser in an insecure way, allowing attackers to open files and trigger HTTP requests, potentially accessing restricted information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian: Security Advisory (DSA-2602-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SolarWinds Orion NPM < 10.3.1 Multiple Vulnerabilities

The remote web server hosts a version of SolarWinds Orion NPM prior to 10.3.1. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting vulnerabilities exist that allow arbitrary web scripts to be injected via the 'syslocation', 'syscontact', or 'sysName' fiel...

CVE-2012-2602

CVE-2012-2602 affects SolarWinds Orion Network Performance Monitor (NPM) prior to 10.3.1, enabling CSRF attacks that can hijack administrator sessions to: (1) create new user accounts via CreateUserStepContainer on Admin/Accounts/Add/OrionAccount.aspx and (2) modify account privileges via a ynAdm...

CVE-2012-2602

creationtimestamp| type| source ---|---|--- 2012-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20011...

CVE-2011-2602

The CVE-2011-2602 entry affects the NVIDIA GeForce 310 driver (version 6.14.12.7061) on Windows XP SP3. A crafted WebGL page (e.g., lots-of-polys-example.html from the Khronos WebGL SDK) can cause a remote denial of service (system crash). Documented impact is availability disruption; attack vect...