93 matches found
Cross-Site Scripting (XSS)
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...
Path Traversal
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...
Sensitive Information Disclosure
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...
CVE-2018-3667
Installation tool IPDT Intel Processor Diagnostic Tool 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation...
CVE-2018-3667
CVE-2018-3667 affects Intel IPDT (Intel Processor Diagnostic Tool) version 4.1.0.24, where the installation tool incorrectly sets permissions on installed files. This misconfiguration can enable execution of arbitrary code and elevate privileges on the host. Public sources in the provided set des...
Ubuntu 14.04 LTS : libytnef vulnerabilities (USN-3667-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3667-1 advisory. It was discovered that libytnef incorrectly handled certain files. An attacker could possibly use this to cause a denial of service. CVE-2017-12141,...
Debian: Security Advisory (DSA-3667-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple QuickTime < 7.7.7 Multiple Vulnerabilities
Binary data 9304.prm...
Jenkins Multiple Vulnerabilities (Oct 2014) - Windows
Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...
APPLE-SA-2015-06-30-5 QuickTime 7.7.7
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-5 QuickTime 7.7.7 QuickTime 7.7.7 is now available and addresses the following: QT Media Foundation Available for: Windows 7 and Windows Vista Impact: Processing a maliciously crafted file may lead to an unexpected application...
Memory corruption
QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663,...
CVE-2015-3667
CVE-2015-3667 affects Apple QuickTime's QT Media Foundation (before 7.7.7) used in OS X pre-10.10.4. The vulnerability is a memory corruption flaw in processing MP4/box structures (notably the stbl box) that can be triggered by a crafted file, potentially allowing remote code execution or a denia...
KLA10621 Multiple vulnerabilities in Apple QuickTime
Memory corruption vulnerabilities were found in Apple QuickTime. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed file. Original advisories Apple advisory Related...
CVE-2014-3667
Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code...
CVE-2014-3667
Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code...
CVE-2014-3667
CVE-2014-3667 affects Jenkins versions: before 1.583 and LTS before 1.565.3. The issue allows an information disclosure where remote authenticated users with the Overall/READ permission can read plugin code by downloading plugins. This is supported by multiple sources (NVD entry and GHSA advisory...
jenkins: multiple issues
SECURITY-87/CVE-2014-3661 anonymous DoS attack through CLI handshake This vulnerability allows unauthenticated users with access to Jenkins' HTTP/HTTPS port to mount a DoS attack on Jenkins through thread exhaustion. - SECURITY-110/CVE-2014-3662 User name discovery Anonymous users can test if the...
FreeBSD : jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoS (549a2771-49cc-11e4-ae2c-c80aa9043978)
Jenkins Security Advisory : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution an...
CVE-2013-3667
The vulnerability (CVE-2013-3667) affects Bare Bones Software products that use their software update mechanism: Yojimbo <= 3.x? (pre‑4.0), TextWrangler <= 4.5.3, and BBEdit