CloudBees Jenkins Literate Code Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Literate is used in one of the document build...

ONAP CLI Authorization Issues Vulnerability

The ONAP CLI is a command line interface for controlling ONAP from the ONAP project. An authorization issue vulnerability exists in ONAP CLI Dublin and prior versions. An attacker can exploit this vulnerability on ports 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271 to gain...

NETSAS Enigma NMS Directory Traversal Vulnerability

NETSAS Enigma NMS is a suite of network management and monitoring tools from NETSAS Australia. A path traversal vulnerability exists in NETSAS Enigma NMS version 65.0.0 and earlier. The vulnerability stems from the failure of a network system or product to properly filter special elements in the...

Netsas Enigma NMS Code Execution Vulnerability

NETSAS Enigma NMS is a suite of network management and monitoring tools from NETSAS Australia. A security vulnerability exists in the user and system file upload functionality in NETSAS Enigma NMS version 65.0.0 and earlier. An attacker can exploit the vulnerability to upload malicious files and...

WordPress Hustle Path Traversal Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Hustle a.k.a. wordpress-popup plugin is one of the online marketing plugins used in it. A path traversal vulnerability exists in...

cPanel cross-site scripting vulnerability (CNVD-2020-19891)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability stems from a lack of proper...

Mitsubishi Electric MELQIC IU1 TCP Functional Resource Management Error Vulnerability

The Mitsubishi Electric MELQIC IU1 is an IU1 series data collection analyzer from Mitsubishi Electric Mitsubishi, Japan. A resource management error vulnerability exists in the TCP function in the Mitsubishi Electric MELQIC IU1 IU1-1M20-D using firmware version 1.0.7 and earlier. The vulnerabilit...

Meetecho Janus Competitive Conditions Issue Vulnerability (CNVD-2020-19851)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A competitive conditions issue vulnerability exists in the plugins/janusvoicemail.c file of the VoiceMail plugin in Meetecho Janus 0.9.1 and earlier versions. An attacker can exploit this vulnerability to cause the serve...

Unraid Remote Code Execution Vulnerability

Unraid is a set of operating systems used primarily by individuals and small businesses. A security vulnerability exists in Unraid version 6.8.0 and earlier. An attacker could exploit the vulnerability to execute code...

Mitsubishi Electric MELQIC IU1 TCP Function Parameter Injection Vulnerability

The Mitsubishi Electric MELQIC IU1 is an IU1 series data collection analyzer from Mitsubishi Electric Mitsubishi, Japan. A parameter injection vulnerability exists in the TCP function of the Mitsubishi Electric MELQIC IU1 IU1-1M20-D using firmware version 1.0.7 and earlier. The vulnerability aris...

ABB eSOMS Cross-Site Scripting Vulnerability

ABB eSOMS is a plant operations management system from ABB Switzerland. A cross-site scripting vulnerability exists in ABB eSOMS 6.0.2 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerabilit...

ABB eSOMS Information Disclosure Vulnerability (CNVD-2020-17169)

ABB eSOMS is a plant operations management system from ABB Switzerland. An information disclosure vulnerability exists in ABB eSOMS 6.0.3 and prior versions. The vulnerability arises from an error in the configuration, etc. of a networked system or product during operation. An unauthorized attack...

UBUNTU-CVE-2020-6810

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and...

jenkins: Memory usage graphs accessible to anyone with Overall/Read

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart...

PT-2020-15361 · Jenkins · Jenkins Sonar Quality Gates Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Sonar Quality Gates Plugin versions 1.3.1 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

Monstra Access Control Error Vulnerability

Monstra is a lightweight content management system CMS. An access control error vulnerability exists in Monstra 3.0.4 and earlier versions. A remote attacker can exploit this vulnerability to take over arbitrary user accounts via the modified login parameter of the edit URI...

DEBIAN-CVE-2020-6795

When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird 68.5...

ZTE E8820V3 Information Disclosure Vulnerability

The ZTE E8820V3 is a Gigabit Dual Band 1200M with WiFi Smart Router. An information disclosure vulnerability exists in ZTE E8820V3 V3.1.0.1000.4 and earlier versions. An attacker can exploit this vulnerability to obtain the wireless password, which can be used to collect information and attack th...

DNN Path Traversal Vulnerability

DNN also known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. A path traversal vulnerability exists in DNN 9.4.4 and earlier versions. The...

Yarn path traversal vulnerability

Yarn is an open source package installation, management tools. A path traversal vulnerability exists in Yarn 1.21.1 and earlier versions. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker can...