339 matches found
Get to Know Steve Povolny
Meet Steve Povolny Head of Advanced Threat Research for Trellix Threat Labs By Trellix · May 17, 2022 This blog was written by Michael Alicea At Trellix, we celebrate and champion our people. This week, I sat down with Steve Povolny, Head of Advanced Threat Research for Trellix Threat Labs. As he...
Vendors are Fixing Security Flaws Faster
Googles Project Zero is reporting that software vendors are patching their code faster. tl;dr In 2021, vendors took an average of 52 days to fix security vulnerabilities reported from Project Zero. This is a significant acceleration from an average of about 80 days 3 years ago. In addition to the...
UVI-2021-1000247 i2c: cadence: fix reference leak when pm_runtime_get_sync fails
i2c: cadence: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
GSD-2021-1000357 i2c: cadence: fix reference leak when pm_runtime_get_sync fails
i2c: cadence: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...
UVI-2021-1000357 i2c: cadence: fix reference leak when pm_runtime_get_sync fails
i2c: cadence: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...
GSD-2021-1000247 i2c: cadence: fix reference leak when pm_runtime_get_sync fails
i2c: cadence: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
Unbreakable Enterprise kernel-container security update
4.14.35-2047.501.0.el7 - block/diskstats: accumulate all per-cpu counters in one pass Konstantin Khlebnikov Orabug: 32531559 - uek-rpm: config-aarch-embedded2 update for Jan 2021 Elba patches Dave Kleikamp Orabug: 32532588 - dts/pensando: Fix compatile - compatible typeo. David Clear Orabug:...
CloudBees Jenkins XSS Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An XSS vulnerability exists i...
CVE-2020-2243
Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...
CVE-2020-2243
Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...
Cross site scripting
Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...
CVE-2020-2243
Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...
CVE-2020-2243
Jenkins Cadence vManager Plugin 3.0.4 and earlier is affected by CVE-2020-2243: it does not escape build descriptions in tooltips, causing a stored XSS vulnerability that can be exploited by attackers with Run/Update permission. Several connected sources confirm the issue and note that Cadence vM...
CVE-2020-2243
Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...
PT-2020-15464 · Jenkins · Jenkins Cadence Vmanager Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Cadence vManager Plugin versions 3.0.4 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. This occurs because build descriptions in tooltips are not properly escaped, allowing attackers...
CVE-2020-0683
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka ‘Windows Installer Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0686. Recent assessments: J3rryBl4nks at March 03, 2020 3:13pm UTC reported: This...
Intel Warns of Critical Info-Disclosure Bug in Security Engine
A critical security bug in the Intel Converged Security and Manageability Engine CSME could allow escalation of privilege, denial of service or information disclosure. The details are included in a bug advisory that in total covers 77 vulnerabilities, 67 of which were found by internal Intel staf...
CloudBees Jenkins Cadence vManager Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. company CloudBees. The product is mainly used to monitor the continuous software version of the release/test project and some timed execution of the task . Cadence vManager Plugin is use...