Jenkins BigPanda Notifier Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

PT-2022-25762 · Jenkins · Jenkins Bigpanda Notifier Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins BigPanda Notifier Plugin versions 1.4.0 and earlier Description: The issue concerns the storage of the BigPanda API key in an unencrypted form within the global configuration file on the Jenkins controller. This file can be accessed b...

dbus-broker security update

28-5.1 - Fix a stack buffer over-read in the c-shquote library - Fix null pointer reference when supplying a malformed XML config file - Add gating.yaml Resolves: CVE-2022-31212 Resolves: CVE-2022-31213...

Jenkins CONS3RT Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

dbus-broker: null pointer reference when supplying a malformed XML config file

A flaw was found in the dbus-broker package. This issue occurs when supplying a malformed XML config file and leads to a NULL pointer dereference...

U.S. Dept Of Defense: AWS Credentials Disclosure at ███

Sensitive AWS credentials were disclosed through a config.json file found on a server. An attacker could have used these credentials to gain access to sensitive information on the AWS account or perform arbitrary modifications on AWS resources. The affected system host was not disclosed. No CVE...

Download Monitor < 4.5.98 - Admin+ Arbitrary File Download

The plugin does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup. Create a new download on:...

[SECURITY] Fedora 36 Update: pcs-0.11.3-4.fc36

pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and create pacemaker based clusters...

GSD-2022-1005182 wifi: nl80211: hold wdev mutex for tid config

wifi: nl80211: hold wdev mutex for tid config This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

Qualcomm 芯片输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip has an input validation error vulnerability tha...

CVE-2022-38850

The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config of llibmpcodecs/vfscale.c...

Input validation

The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config of llibmpcodecs/vfscale.c...

PT-2022-7418 · Mplayer +3 · Mplayer +3

Name of the Vulnerable Software and Affected Versions: MPlayer versions prior to SVN-r38374-13.0.1 Description: The issue is related to a Divide By Zero vulnerability via the config function of llibmpcodecs/vf scale.c and the demux open avi function. This vulnerability may allow an attacker to...

RHEL 7 / 8 : OpenShift Container Platform 4.7.13 (RHSA-2021:2122)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2122 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

MPlayer 数字错误漏洞

MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in the MPlayer Project mencoder SVN-r38374-13.0.1 version, which stems from an easy-to-zero-divide function config via llibmpcodecs/vfscale.c. The vulnerability is caused by the use of the function...

CVE-2022-38850

The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config of llibmpcodecs/vfscale.c...

Malicious code in module-config-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d812c19b53f06574d5863b3003258dc87f976c21a6187600441a3b74e1d3261e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4665 Malicious code in module-config-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d812c19b53f06574d5863b3003258dc87f976c21a6187600441a3b74e1d3261e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-37278 · Git +1 · Cyclonedds

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to a segmentation fault on an unknown address. The crash state includes ddsi config init and fuzz config init.c, indicating the...

Yellowfin 跨站脚本漏洞

Yellowfin is a suite of innovative data and analytics products from Yellowfin Australia. A security vulnerability exists in Yellowfin Business Intelligence version 7.3, which stems from a cross-site scripting XSS vulnerability found to be contained in the configMap parameter. An attacker could...