CVE-2019-10431

A flaw was found in the Jenkins Script Security plugin. Sandbox protection could be circumvented through default parameter expressions in constructors. This allowed attackers, able to specify and run sandboxed scripts, to execute arbitrary code in the context of the Jenkins master JVM. The highes...

PT-2019-11825 · Jenkins · Jenkins Script Security Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1.64 and earlier Description: A sandbox bypass issue related to the handling of default parameter expressions in constructors allows attackers to execute arbitrary code in sandboxed scripts...

CyberLink LabelPrint Buffer Overflow Vulnerability

CyberLink LabelPrint is a fast and easy to use CD-ROM labeling software that supports the latest lightscribe CD-ROM cover burning technology. A stack buffer overflow vulnerability exists in CyberLink LabelPrint version 2.5. A remote attacker can use the 'author', 'artist', 'artist' or ' default'...

SQL injection vulnerability in LiveX video conferencing system/default.asp parameter of Shanghai Caiman Software Technology Co.

LiveX video conferencing system of Shanghai ColorManager Software Technology Co., Ltd. is a mobile HD video conferencing system solution. There is a SQL injection vulnerability in the parameter /default.asp of LiveX Video Conference System of Shanghai Color League Software Technology Co., Ltd,...