55 matches found
FreeBSD : jenkins -- multiple vulnerabilities (1ddab5cb-14c9-4632-959f-802c412a9593)
Jenkins Security Advisory : DescriptionHigh SECURITY-1868 / CVE-2020-2220 Stored XSS vulnerability in job build time trend High SECURITY-1901 / CVE-2020-2221 Stored XSS vulnerability in upstream cause High SECURITY-1902 / CVE-2020-2222 Stored XSS vulnerability in 'keep forever' badge icons High...
Debian DSA-4632-1 : ppp - security update
Ilja Van Sprundel reported a logic flaw in the Extensible Authentication Protocol EAP packet parser in the Point-to-Point Protocol Daemon pppd. An unauthenticated attacker can take advantage of this flaw to trigger a stack-based buffer overflow, leading to denial of service pppd daemon crash. C...
CVE-2011-4632
Cross-site Scripting XSS in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the tcemain flash message...
CVE-2011-4632
CVE-2011-4632 : TYPO3 core XSS vulnerability in TPY03 versions pre-4.3.12, pre-4.4.9 (4.4.x) and pre-4.5.4 (4.5.x). Root cause: lack of proper validation of client-side data by the web application, allowing remote attackers to inject arbitrary scripts via the tcemain flash message. Affected softw...
CVE-2015-4632
creationtimestamp| type| source ---|---|--- 2018-10-19 00:23:09+00:00| seen| https://t.me/cibsecurity/753...
CVE-2015-4632
Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the templatepath parameter to 1 svc/virtualshelves/search or 2...
CVE-2015-4632
CVE-2015-4632 : Koha suffers a directory traversal vulnerability in multiple releases (Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, 3.20.x before 3.20.1). An attacker can read arbitrary files by injecting a dot-dot encoded slash (..%2f) via the template_path parameter...
CVE-2017-4632
CVE-2017-4632 is rejected/not used and does not represent an active vulnerability entry.
About the security content of tvOS 9.2.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Command injection
Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme. It will lead to arbitrary OS command execution with a URL substring of sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext:: followed by the command. The Atlassian ID...
CVE-2017-8768
Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme. It will lead to arbitrary OS command execution with a URL substring of sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext:: followed by the command. The Atlassian ID...
CVE-2016-4632
CVE-2016-4632 affects ImageIO in Apple iOS <9.3.3, OS X <10.11.6, tvOS <9.2.2, and watchOS
About the security content of watchOS 2.2.2
About the security content of watchOS 2.2.2 This document describes the security content of watchOS 2.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
NEW VMSA-2015-0002 VMware vSphere Data Protection product update addresses a certificate validation vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2015-0002 Synopsis: VMware vSphere Data Protection product update addresses a certificate validation vulnerability. Issue date:...
CVE-2014-4632
Affected products: VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1; also the EMC Avamar proxy client components (ADS/AVE) 6.x and 7.0.x. Root cause: SSL certificate validation is insufficient; VDP and Avamar proxy fail to properly verify X.509 certificates from vC...
VMSA-2015-0002:VMware vSphere Data Protection product update addresses a certificate validation vulnerability.
VMSA-2015-0002 VMware vSphere Data Protection product update addresses a certificate validation vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2015-0002 VMware Security Advisory Synopsis: VMware vSphere Data Protection product update addresses a certificate...
CVE-2013-4632
CVE-2013-4632 affects Huawei Access Router (AR) before V200R002SPC003. A remote attacker can cause a denial of service (device reset) by sending a crafted field in a DHCP request, with the attack demonstrated from an IP phone. The NVD CVSS v2 base score is 7.8 (HIGH), indicating a network-exploit...
Mandriva Update for mplayer MDVSA-2011:088 (mplayer)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Update for ffmpeg MDVSA-2011:061 (ffmpeg)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...