4339 matches found
jenkins-script-security-plugin: handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts...
Audible has an unspecified vulnerability
Audible is an online playback application for audiobooks from the American company Audible. A security vulnerability exists in versions 2.34.0 and earlier of Audible, based on the Android platform, which stems from the program's failure to validate SSL credentials against Adobe SDKs. An attacker...
Rockwell Automation Arena Simulation Software Cat. 9502-Ax Buffer Overflow Vulnerability
Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. A security vulnerability exists in Rockwell Automation Arena Simulation Software Cat. 9502-Ax 16.00.00 and earlier versions. An attacker c...
Out-of-bounds
P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21 have an out of bounds read vulnerability. The system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successfu...
rConfig path traversal vulnerability
rConfig is an open source network configuration management utility . A path traversal vulnerability exists in rConfig 3.9.3 and earlier versions. The vulnerability stems from a failure of a network system or product to properly filter for special elements in a resource or file path. An attacker...
ProFTPD Code Issue Vulnerability
ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. A code issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD 1.3.6b and earlier versions, which can be exploited by an...
Statusnet Cross-Site Scripting Vulnerability
statusnet is an open source micro-blogging program written in PHP. A cross-site scripting vulnerability exists in the content of error messages in statusnet 2010 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker ca...
PT-2019-14695 · Jenkins · Jenkins Support Core Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Support Core Plugin versions 2.63 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to delete support bundles. Recommendations: For Jenkins Support Core Plugin versions 2.6...
PT-2019-14698 · Jenkins · Jenkins Spira Importer Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Spira Importer Plugin versions 3.2.2 and earlier Description: The issue concerns the storage of credentials in the global configuration file on the Jenkins master. Credentials are stored unencrypted, allowing users with access to the...
Openfind MAIL2000 /cgi-bin/portal Login Function Cross-Site Scripting Vulnerability
Openfind Mail2000 is a Web-based e-mail system. A cross-site scripting vulnerability exists in the login function of /cgi-bin/portal in Openfind Mail2000 versions 6.0 and earlier and 7.0 and earlier. The vulnerability stems from a lack of proper validation of client data by the WEB application. A...
CVE-2019-8247
Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2019-8244
Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...
CVE-2019-8243
Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...
CVE-2019-8241
Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...
Adobe Media Encoder Out-of-Bounds Read Vulnerability (CNVD-2019-41625)
Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Media Encoder 13.1 and earlier versions for Window and macOS platforms. An attacker can exploit this vulnerability to obtain sensitive...
Adobe Media Encoder Out-of-Bounds Write Vulnerability
Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Media Encoder 13.1 and earlier versions for Window and macOS-based platforms. An attacker can exploit the vulnerability to execute code...
Adobe Illustrator Memory Corruption Vulnerability
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator CC 2019 23.1 and earlier versions for Window-based platforms. An attacker can exploit the vulnerability to execute code...
Race condition
Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...
Cryptocat Encryption Issues Vulnerabilities
Cryptocat is an open source online cryptographic chat application. A security vulnerability exists in the Socialist Millionnaire Protocol in versions prior to Cryptocat 2.0.22, which stems from a weak encryption mechanism. An attacker can exploit the vulnerability to obtain sensitive information...