CVE-2016-3727

The API URL computer/master/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors...

CVE-2016-3727

CVE-2016-3727 affects Jenkins (versions before 2.3 and before 1.651.2 LTS). The API URL /computer/(master)/api/xml allowed remote authenticated users with extended read permission on the master node to disclose sensitive global configuration information. This is demonstrated by a public PoC URL i...

FreeBSD : jenkins -- multiple vulnerabilities (e387834a-17ef-11e6-9947-7054d2909b71)

Jenkins Security Advisory : DescriptionSECURITY-170 / CVE-2016-3721 Arbitrary build parameters are passed to build scripts as environment variables SECURITY-243 / CVE-2016-3722 Malicious users with multiple user accounts can prevent other users from logging in SECURITY-250 / CVE-2016-3723...

Fedora Update for webkitgtk FEDORA-2016-9

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : webkitgtk-2.4.10-1.fc24 (2016-a4fcb02d6b)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Fedora 24 : webkitgtk3-2.4.10-1.fc24 (2016-fde7ffcb77)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Fedora 23 : webkitgtk-2.4.10-1.fc23 (2016-5d6d75dbea)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Fedora Update for webkitgtk FEDORA-2016-5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for webkitgtk3 FEDORA-2016-1

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : webkitgtk3-2.4.10-1.fc23 (2016-1a7f7ffb58)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Apple Safari Multiple Vulnerabilities-01 (Jul 2015) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

CVE-2015-3727

WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site...

CVE-2015-3727

WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site...

CVE-2015-3727

CVE-2015-3727 affects WebKit in Apple Safari (and WebKitGTK builds) where the product does not properly restrict rename operations on WebSQL tables. The result is that a remote attacker can have a crafted site access an arbitrary web site’s WebSQL database. Affected versions include Safari before...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the 1 groups parameter in a send action in the sendmail module or 2 query parameter in ...

CVE-2013-3729

Multiple cross-site request forgery CSRF vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the 1 groups parameter in a send action in the sendmail module or 2 query parameter in ...

CVE-2013-3727

Kasseler CMS (before 2 r1232) exposes a SQL injection vulnerability (CVE-2013-3727) via the groups[] parameter to admin.php, allowing a remote authenticated user to execute arbitrary SQL commands; the advisory notes this can be leveraged through CSRF to permit remote unauthenticated SQL execution...

Multiple Vulnerabilities in Kasseler CMS

Advisory ID: HTB23158 Product: Kasseler CMS Vendor: Kasseler CMS Vulnerable Versions: 2 r1223 and probably prior Tested Version: 2 r1223 Vendor Notification: May 29, 2013 Vendor Patch: June 28, 2013 Public Disclosure: July 3, 2013 Vulnerability Type: SQL Injection CWE-89, Cross-Site Scripting...

Kasseler CMS 2 r1223 - Multiple Vulnerabilities

Advisory ID: HTB23158 Product: Kasseler CMS Vendor: Kasseler CMS Vulnerable Versions: 2 r1223 and probably prior Tested Version: 2 r1223 Vendor Notification: May 29, 2013 Vendor Patch: June 28, 2013 Public Disclosure: July 3, 2013 Vulnerability Type: SQL Injection CWE-89, Cross-Site Scripting...