HashBrown CMS 'postUser' function boost vulnerability

HashBrown CMS is an open source headless content management system CMS. A power lifting vulnerability exists in the 'postUser' function in HashBrown CMS version 1.3.3 and earlier. An attacker can exploit this vulnerability to change the hashed password of an administrator account or reset the...

PySAML2 XML Signature Wrapper Vulnerability

PySAML2 is a pure Python implementation of SAML2. An XML signature wrapping vulnerability exists in PySAML2 versions prior to 5.0.0. The vulnerability stems from the fact that PySAML2 does not check whether signatures in SAML documents are wrapped. An attacker can exploit this vulnerability to...

Unspecified Vulnerability in Baidu Rust SGX SDK

Baidu Rust SGX SDK is a Rust language development kit for Intel SGX Trusted Computing Platform from Baidu, China. A security vulnerability exists in Baidu Rust SGX SDK 1.0.8 and earlier versions. No detailed vulnerability details are available at this time...

WordPress ListingPro theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ListingPro theme is a directory website theme plugin used in it. A cross-site scripting vulnerability exists in WordPress...

libESMTP Buffer Overflow Vulnerability

libESMTP is an email publishing client library. It supports managing email publishing through a pre-configured Mail Transfer Agent MTA. A buffer overflow vulnerability exists in ntlmbuildtype2 in the ntlm/ntlmstruct.c file in libESMTP 1.0.6 and earlier. The vulnerability stems from a networked...

CVE-2019-18997

The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting...

CloudBees Jenkins Maven Release Plugin Code Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Maven Release Plugin is used in one of the...

Barco ClickShare Button R9861500D01 Information Disclosure Vulnerability

The Barco ClickShare Button R9861500D01 is a wireless control device for presentation systems from Barco Belgium. An information disclosure vulnerability exists in Barco ClickShare Button R9861500D01 versions prior to 1.9.0, which can be exploited by an attacker to disclose information...

PT-2019-14709 · Jenkins · Jenkins Build Failure Analyzer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Build Failure Analyzer Plugin versions 1.24.1 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression...

PT-2019-16835 · Elog · Elog

Name of the Vulnerable Software and Affected Versions: ELOG versions 3.1.4-57bea22 and below Description: The issue is related to a denial of service due to a use after free, where a remote unauthenticated attacker can crash the server by sending multiple HTTP POST requests. This causes the...

PT-2019-14721 · Jenkins · Jenkins Team Concert Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Team Concert Plugin versions 1.3.0 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs,...

jenkins-script-security-plugin: handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts...

Audible has an unspecified vulnerability

Audible is an online playback application for audiobooks from the American company Audible. A security vulnerability exists in versions 2.34.0 and earlier of Audible, based on the Android platform, which stems from the program's failure to validate SSL credentials against Adobe SDKs. An attacker...

Rockwell Automation Arena Simulation Software Cat. 9502-Ax Buffer Overflow Vulnerability

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. A security vulnerability exists in Rockwell Automation Arena Simulation Software Cat. 9502-Ax 16.00.00 and earlier versions. An attacker c...

Out-of-bounds

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21 have an out of bounds read vulnerability. The system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successfu...

rConfig path traversal vulnerability

rConfig is an open source network configuration management utility . A path traversal vulnerability exists in rConfig 3.9.3 and earlier versions. The vulnerability stems from a failure of a network system or product to properly filter for special elements in a resource or file path. An attacker...

ProFTPD Code Issue Vulnerability

ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. A code issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD 1.3.6b and earlier versions, which can be exploited by an...

Statusnet Cross-Site Scripting Vulnerability

statusnet is an open source micro-blogging program written in PHP. A cross-site scripting vulnerability exists in the content of error messages in statusnet 2010 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker ca...

PT-2019-14698 · Jenkins · Jenkins Spira Importer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Spira Importer Plugin versions 3.2.2 and earlier Description: The issue concerns the storage of credentials in the global configuration file on the Jenkins master. Credentials are stored unencrypted, allowing users with access to the...

PT-2019-14695 · Jenkins · Jenkins Support Core Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Support Core Plugin versions 2.63 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to delete support bundles. Recommendations: For Jenkins Support Core Plugin versions 2.6...