61 matches found
CVE-2018-3724
The CVE-2018-3724 entry maps to a path traversal in the Node.js module general-file-server. Publicly reported details show that lack of file-path sanitization (currpath) allows an attacker to read arbitrary files by crafting requests (for example, using ../ paths). Affected component is the gener...
CVE-2010-3724
CVE-2010-3724 entry is rejected and not used; it does not represent an active vulnerability.
Debian DSA-3724-1 : gst-plugins-good0.10 - security update
Chris Evans discovered that the GStreamer 0.10 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing- exploitation.html This update removes the...
Fedora 22 : jenkins (2016-f7e7a6067d)
Security fix for CVE-2016-3721, CVE-2016-3722, CVE-2016-3723, CVE-2016-3724, CVE-2016-3725, CVE-2016-3726, CVE-2016-3727 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...
Fedora 23 : jenkins (2016-9ba53cf8a2)
Security fix for CVE-2016-3721, CVE-2016-3722, CVE-2016-3723, CVE-2016-3724, CVE-2016-3725, CVE-2016-3726, CVE-2016-3727 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...
Moderate: Red Hat Security Advisory: jenkins security update
An updated Jenkins package and image that includes security fixes are now available for Red Hat OpenShift Enterprise 3.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2016-3724
CVE-2016-3724 affects Jenkins before 2.3 and LTS before 1.651.2. The issue allows remote authenticated users with extended read access to extract sensitive password information by reading a job configuration. Root cause: exposed password data in job configuration accessible to users with read per...
FreeBSD : jenkins -- multiple vulnerabilities (e387834a-17ef-11e6-9947-7054d2909b71)
Jenkins Security Advisory : DescriptionSECURITY-170 / CVE-2016-3721 Arbitrary build parameters are passed to build scripts as environment variables SECURITY-243 / CVE-2016-3722 Malicious users with multiple user accounts can prevent other users from logging in SECURITY-250 / CVE-2016-3723...
APPLE-SA-2015-06-30-1 iOS 8.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-1 iOS 8.4 iOS 8.4 is now available and addresses the following: Application Store Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A malicious universal provisioning profile app ma...
CVE-2015-3724
CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ICC profile in a PDF document, a different vulnerability than CVE-2015-3723...
CVE-2015-3724
CVE-2015-3724 affects Apple iOS CoreGraphics. A memory corruption issue in handling ICC profiles inside PDFs can allow remote code execution or cause a denial of service. Affected: iOS prior to 8.4; vulnerable component: CoreGraphics (ICC profile processing). Impact: arbitrary code execution or s...
GLSA-201309-17 : Monkey HTTP Daemon: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201309-17 Monkey HTTP Daemon: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Monkey HTTP Daemon. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a...
CVE-2013-3724
The mkrequestheaderprocess function in mkrequest.c in Monkey 1.1.1 allows remote attackers to cause a denial of service thread crash and service outage via a '\0' character in an HTTP request...
CVE-2013-3724
CVE-2013-3724 affects Monkey HTTP Daemon 1.1.1, where mk_request_header_process in mk_request.c can be triggered by a null byte ('\0') in an HTTP request to cause a denial of service (thread crash and service outage). This vulnerability is documented across multiple sources (NVD, Red Hat, Gentoo ...
CVE-2012-3724
CVE-2012-3724 affects CFNetwork in iOS before 6.0, where host portion of URLs could be misidentified, causing a maliciously crafted URL to cause requests to be made to an incorrect hostname and potentially disclose sensitive information. The issue is documented in Apple’s iOS 6 release notes and ...
SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 3724)
IBM Java 6 SR9 was released which fixes a lot of security issues. IBM JDK Alerts can also be found on this page: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE ...
CVE-2008-3724
This CVE affects Papoo’s web application prior to version 3.7.2, where an SQL injection flaw exists in index.php exploitable via the suchanzahl parameter. The root cause is a vulnerable handling of input in index.php allowing remote arbitrary SQL execution. The vulnerability is documented in sour...
CVE-2007-3724
CVE-2007-3724 : The Windows XP kernel process scheduler does not use the kernel’s process statistics and instead bases scheduling on CPU billing gathered from periodic sampling ticks, which results in preferential treatment of “interactive” processes that sleep voluntarily. This behavior can allo...