9463 matches found
jenkins: Item creation restriction bypass vulnerability
A flaw was found in Jenkins. When attempting to create an item prohibited by ACLhasCreatePermission2 or TopLevelItemDescriptorisApplicableInItemGroup through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may...
jenkins: Item creation restriction bypass vulnerability
A flaw was found in Jenkins. When attempting to create an item prohibited by ACLhasCreatePermission2 or TopLevelItemDescriptorisApplicableInItemGroup through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may...
USN-7083-1 openjpeg2 vulnerabilities
It was discovered that OpenJPEG incorrectly handled certain memory operations when using the command line "-ImgDir" in a directory with a large number of files, leading to an integer overflow vulnerability. An attacker could potentially use this issue to cause a denial of service. This issue only...
PT-2024-9189
Name of the Vulnerable Software and Affected Versions: Instant AOS versions 8 through 10 Description: An authenticated Path Traversal issue exists, allowing an attacker to copy arbitrary files to a user-readable location from the command line interface of the underlying operating system. This cou...
PT-2024-9192
Name of the Vulnerable Software and Affected Versions: Instant AOS versions 8 and 10 Description: An authenticated command injection vulnerability exists in the command line interface of Instant AOS. This vulnerability allows an attacker to execute arbitrary commands as a privileged user on the...
PT-2024-9190
Name of the Vulnerable Software and Affected Versions: Instant AOS versions 8 and 10 Description: An arbitrary file creation issue exists in the command line interface of Instant AOS-8 and AOS-10. This could allow an authenticated remote attacker to create arbitrary files, potentially leading to...
PT-2024-9191
Name of the Vulnerable Software and Affected Versions: Instant AOS versions 8 through 10 Description: The issue is related to an arbitrary file creation vulnerability in the command line interface CLI of the affected operating systems. This vulnerability could allow an authenticated remote attack...
CVE-2024-47462: Undefined Security Weakness
An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution RCE on the underlying...
CVE-2024-47463: Undefined Security Weakness
An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution RCE on the underlying...
EulerOS 2.0 SP12 : vim (EulerOS-SA-2024-2805)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack...
EulerOS 2.0 SP12 : vim (EulerOS-SA-2024-2793)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack...
Custom application fails to launch when the command line exceeds 203 characters
Custom application fails to launch when the command line exceeds 203 characters. Application appears to launch and then disappears...
Cisco Analog Telephone Adapter Command-Line Interface Arbitrary Command Execution
The vulnerability of the command-line interface of microprogramming software for Cisco Analog Telephone Adapter ATA series 190 devices exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows an...
Fortinet FortiWeb Stack-based buffer overflow in command line interpreter (FG-IR-21-132)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-132 advisory. - Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated...
Cisco Firepower Threat Defense Command-line Interface Privilege Escalation
The vulnerability of the command-line interface of Cisco Firepower Threat Defense FTD microprogramming systems is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or cause servic...
Firefox Command-Line Temporary File Permissions
The vulnerability of Firefox’s command-line interface for reading, viewing bookmarks, and accessing history is related to the creation of temporary files with insecure permissions in the /tmp directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
Fortinet Fortigate Buffer overflow in TFTP client library of CLI (FG-IR-21-173)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-173 advisory. - A buffer overflow CWE-121 in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an...
Fortinet Fortigate ] Sensitive information is displayed in cleartext in the CLI window when using diagnose sys ha checksum command (FG-IR-20-009)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-009 advisory. - A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earlier...
Fortinet Fortigate Format string vulnerability in command line interpreter (FG-IR-21-235)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-235 advisory. - A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC...
