CVE-2019-5989

The CVE-2019-5989 issue is a DOM-based cross-site scripting vulnerability in the Analysis Object Page of Access analysis CGI An-Analyzer (released around 2019-06-24). The root cause is DOM-based XSS that could allow a remote attacker to inject arbitrary web script or HTML via the Analysis Object ...

CVE-2019-5987

This CVE concerns the Access analysis CGI An-Analyzer product. The issue is OS command injection in the Management Page (CVE-2019-5987) that can be triggered by a remote attacker with authentication to the product, allowing execution of arbitrary OS commands. Affected component: the Management Pa...

CVE-2019-5987

Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page...

CVE-2019-5988: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Page...

CVE-2019-5987: Improper Neutralization of Special Elements used in an OS Command

Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page...

CVE-2019-5990: Insufficiently Protected Credentials

Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password via HTTP referer...

CVE-2019-5989: Improper Neutralization of Input During Web Page Generation

DOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Analysis Object Page...

PT-2020-11187

Name of the Vulnerable Software and Affected Versions An-Analyzer versions prior to the version released after June 24, 2019 Description The issue allows remote authenticated attackers to execute arbitrary OS commands via the Management Page. Recommendations For An-Analyzer versions prior to the...

PT-2020-11189

Name of the Vulnerable Software and Affected Versions An-Analyzer versions prior to the version released after 2019 June 24 Description A DOM-based cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the Analysis Object Page. Recommendations For An-Analyz...

PT-2020-11190

Name of the Vulnerable Software and Affected Versions An-Analyzer versions prior to the version released after June 24, 2019 Description The issue allows remote attackers to obtain a login password via the HTTP referer. Recommendations For An-Analyzer versions prior to the version released after...

PT-2020-11188

Name of the Vulnerable Software and Affected Versions An-Analyzer versions prior to the version released after 2019 June 24 Description A stored cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the Management Page. This could potentially lead to the...

PT-2020-22836

Уязвимость средства трассировки MPI-процессов Intel Trace Analyzer and Collector связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2020-22837

Уязвимость средства трассировки MPI-процессов Intel Trace Analyzer and Collector связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

CloudBees Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site request forgery vulnerability exists in CloudBees Jenkins Build Failure Analyzer Plugin 1.24.1 and prior versions. The vulnerability stems from a WEB...

CloudBees Jenkins Build Failure Analyzer Plugin Authorization Issues Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . An authorization issue vulnerability exists in CloudBees Jenkins Build Failure Analyzer Plugin 1.24.1 and prior versions. The vulnerability stems from a lack of...

CVE-2019-16554

A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression...

CVE-2019-16553

A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers to have Jenkins evaluate a computationally expensive regular expression...

CVE-2019-16554

A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression...

CVE-2019-16555

A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process...

Information disclosure

A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression...