20289 matches found
CVE-2012-0843
uzbl: Information disclosure via world-readable cookies storage file...
CVE-2012-0824
gnusound 0.7.5 has format string issue...
CVE-2012-0843
CVE-2012-0843 affects the uzbl browser, where information disclosure arises from a world-readable cookies storage file. Root cause is exposure of cookies data stored in a world-readable file, enabling partial confidentiality impact (C: HIGH in CVSS3.1) with local, low-complexity access and no aut...
CVE-2012-0824
gnusound 0.7.5 has format string issue...
CVE-2012-0824
CVE-2012-0824 affects gnusound 0.7.5 with a format string issue (root cause: improper format string handling). Public data in the initial doc shows CVSS metrics: CVSS v2 base 7.5 (HIGH) and CVSS v3.1 base 9.8 (CRITICAL). No explicit exploitation details or affected versions beyond 0.7.5 are provi...
CVE-2012-0842
surf: cookie jar has read access from other local user...
CVE-2012-0842
CVE-2012-0842 affects surf: the cookie jar can be read by a local user, enabling potential private cookie disclosure. The available documents describe the issue and its local access impact but do not provide exploitation details or remediation guidance.
CVE-2012-0842
surf: cookie jar has read access from other local user...
CVE-2012-4439
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins...
CVE-2012-4438
Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code...
CVE-2012-4439
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins...
CVE-2012-4441
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
CVE-2012-4441
CVE-2012-4441 : Jenkins Core prior to 1.482 and LTS prior to 1.466.2 are affected by a Cross‑Site Scripting (XSS) vulnerability in the CI Game plugin, allowing remote attackers to inject arbitrary scripts/HTML in the vulnerable UI. The issue stems from inadequate input validation in the plugin, l...
CVE-2012-4440
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin...
CVE-2012-4440
CVE-2012-4440 is a Cross-site Scripting (XSS) vulnerability in Jenkins involving the Violations plugin. The issue affects Jenkins core builds prior to 1.482 and LTS lines prior to 1.466.2, where remote attackers could inject arbitrary web script or HTML via the Violations plugin. The connected do...
CVE-2012-4439
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins...
CVE-2012-4439
Jenkins core is affected by CVE-2012-4439: XSS via a crafted URL in Jenkins < 1.482 and LTS
CVE-2012-4438
Jenkins core before 1.482 and LTS before 1.466.2 is vulnerable to an input-validation issue that allows a user with read and HTTP access to the Jenkins master to insert data and execute arbitrary code. Affected components are org.jenkins-ci.main:jenkins-core in Jenkins prior to these versions. Im...
SUSE SLES12 Security Update : bash (SUSE-SU-2019:2976-1)
This update for bash fixes the following issues : CVE-2012-6711: Fixed a heap-based buffer overflow during echo of unsupported characters bsc1138676. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...
