Jenkins Multiple Vulnerabilities (Feb 2017) - Windows

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

Jenkins Multiple Vulnerabilities (Feb 2017) - Linux

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

Jenkins remote code execution vulnerability (CVE-2017-2608)

No description provided by source...

[SECURITY] Fedora 23 Update: openslp-2.0.0-8.fc23

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

[SECURITY] Fedora 24 Update: openslp-2.0.0-9.fc24

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

CVE-2015-2608

Unspecified vulnerability in 1 the Oracle Communications Diameter Signaling Router DSR component in Oracle Communications Applications 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and 7.1.0 and earlier; 2 the Oracle Communications Performance Intelligence Center Software component in...

CVE-2015-2608

CVE-2015-2608 concerns an unspecified vulnerability in Oracle Communications Applications components (DSR, Performance Intelligence Center, Policy Management, Tekelec HLR Router) where PMAC-related vectors may affect confidentiality, integrity, and availability. Affected versions span multiple re...

Ubuntu: Security Advisory (USN-2608-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: openslp-1.2.1-22.fc20

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

Ubuntu 14.04 LTS : QEMU vulnerabilities (USN-2608-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2608-1 advisory. Jason Geffner discovered that QEMU incorrectly handled the virtual floppy driver. This issue is known as VENOM. A malicious guest could use this issue to...

[security bulletin] HPSBMU03043 rev.1 - HP Smart Update Manager for Windows and Linux, Local Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04302476 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04302476 Version: 1 HPSBMU03043 rev....

CVE-2014-2608

HP Smart Update Manager (SUM) for Windows (6.x, fixed in 6.4.1) and Linux (6.2.x–6.4.x, fixed in 6.4.1) is affected by CVE-2014-2608. The issue enables local disclosure of information and potential privilege escalation via unknown vectors. HP’s Security Bulletin HPSBMU03043 rev.1 notes the affect...

Debian DSA-2608-1 : qemu - buffer overflow

It was discovered that the e1000 emulation code in QEMU does not enforce frame size limits in the same way as the real hardware does. This could trigger buffer overflows in the guest operating system driver for that network card, assuming that the host system does not discard such frames which it...

CVE-2011-2608

CVE-2011-2608 affects HP OpenView Performance Agent (versions 4.70, 5.0) and HP Operations Agent (11.0, 8.60.005–8.60.008, 8.60.501, 8.53). The vulnerability allows remote attackers to delete arbitrary files by sending a full pathname in the File field of a Register command. HP’s security bulleti...

CVE-2011-2608

ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command...

CVE-2009-2608

CVE-2009-2608 affects PHP Address Book 4.0.x, with SQL injection vulnerabilities exploitable via (1) the id parameter to delete.php and (2) the alphabet parameter to index.php. The root cause is improper input handling in these endpoints, enabling arbitrary SQL execution by an attacker. The descr...

CVE-2009-2259

CVE-2009-2259 is a duplicate of CVE-2009-2608 and should reference that entry. Connected records confirm that PHP Address Book 4.0.x contains multiple SQL injection vulnerabilities exploitable via delete.php (id) or index.php (alphabet), enabling remote arbitrary SQL commands. The root cause is u...

CVE-2009-2608

creationtimestamp| type| source ---|---|--- 2009-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9023...

CVE-2008-2608

CVE-2008-2608 affects Oracle Database 10.1.0.5 and 10.2.0.3 Data Pump, involving SYS.KUPF$FILE_INT. The vulnerability is exploitable via Oracle Net with Execute on SYS.KUPF$FILE_INT and requires authentication; impact is tied to availability (per CVSS data: Network, Low complexity, Single auth, P...

SuSE 10 Security Update : fetchmail (ZYPP Patch Number 2608)

Three security issues have been fixed in fetchmail : - fetchmail when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers. CVE-2005-4348 - fetchmail did not properly enforce TLS and ma...