86 matches found
Ubuntu: Security Advisory (USN-3726-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-3726
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names...
CVE-2018-3726
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names...
CVE-2018-3726
The vulnerability relates to the crud-file-server Node.js module prior to version 0.8.0. Affected component/file: directory index handling in crud-file-server where filenames are not properly validated, leading to a stored Cross-Site Scripting (XSS) vulnerability. Root cause: insufficient sanitiz...
CVE-2010-3726
CVE-2010-3726 is rejected and not used; this entry does not represent an active vulnerability.
Debian: Security Advisory (DSA-3726-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 22 : jenkins (2016-f7e7a6067d)
Security fix for CVE-2016-3721, CVE-2016-3722, CVE-2016-3723, CVE-2016-3724, CVE-2016-3725, CVE-2016-3726, CVE-2016-3727 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...
Fedora 23 : jenkins (2016-9ba53cf8a2)
Security fix for CVE-2016-3721, CVE-2016-3722, CVE-2016-3723, CVE-2016-3724, CVE-2016-3725, CVE-2016-3726, CVE-2016-3727 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...
Moderate: Red Hat Security Advisory: jenkins security update
An updated Jenkins package and image that includes security fixes are now available for Red Hat OpenShift Enterprise 3.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2016-3726
CVE-2016-3726 corresponds to multiple open redirect vulnerabilities in Jenkins. Public details in connected sources specify that Jenkins versions prior to 2.3 and OpenShift/Jenkins LTS prior to 1.651.2 are affected via scheme-relative URLs that could redirect users to arbitrary sites, enabling ph...
FreeBSD : jenkins -- multiple vulnerabilities (e387834a-17ef-11e6-9947-7054d2909b71)
Jenkins Security Advisory : DescriptionSECURITY-170 / CVE-2016-3721 Arbitrary build parameters are passed to build scripts as environment variables SECURITY-243 / CVE-2016-3722 Malicious users with multiple user accounts can prevent other users from logging in SECURITY-250 / CVE-2016-3723...
CVE-2015-3726
The CVE-2015-3726 vulnerability affects the Telephony subsystem of Apple iOS prior to 8.4. It allows physically proximate attackers to execute arbitrary code through crafted SIM/UIM payloads by exploiting multiple input validation issues in parsing SIM/UIM data. The issue is specific to the Telep...
Oracle Linux 4 : kernel (ELSA-2010-0474)
From Red Hat Security Advisory 2010:0474 : Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CV...
CVE-2013-3726
CVE-2013-3726 is rejected and not used; reference CVE-2013-1636 instead; not an active vulnerability.
CVE-2012-3726
CVE-2012-3726 is a double-free vulnerability in ImageIO’s JPEG handling on iOS prior to iOS 6. The flaw could allow remote code execution or a denial of service via a crafted JPEG image. Public documents underlined in Apple advisories indicate the issue was addressed in the iOS 6 update; no expli...
SuSE 10 Security Update : Linux Kernel (x86_64) (ZYPP Patch Number 6697)
This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. The following security issues were fixed: CVE-2009-3939: A sysctl variable of the megaraidsas driver was worldwriteable, allowing local users to cause a denial of service or potential code...
CVE-2011-3726
CVE-2011-3726 affects DoceboLMS 4.0.4. A direct request to a PHP file such as views/dummy/show.php can disclose the installation path via an error message, enabling information disclosure. The vulnerability is described as an information leakage vector rather than code execution or authentication...
CentOS Update for kernel CESA-2009:1670 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...