16556 matches found
PT-2024-30602 · WordPress · Element Pack Elementor Addons
Name of the Vulnerable Software and Affected Versions: The Element Pack Elementor Addons plugin for WordPress versions up to, and including, 5.7.2 Description: The issue allows authenticated attackers with contributor-level access and above to read the contents of arbitrary files on the server,...
Arbitrary File Read
org.jenkins-ci.main, jenkins-core and org.jenkins-ci.main, remoting are vulnerable to Arbitrary File Read. The vulnerability is caused due to a missing validation on the file paths that are invoked on the controller by the agent while retrieving files using API ClassLoaderProxyfetchJar. This allo...
CVE-2024-6893
The "soapcgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources...
CVE-2024-6893: Improper Restriction of XML External Entity Reference
The "soapcgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources...
FreeBSD : jenkins -- multiple vulnerabilities (db8fa362-0ccb-4aa8-9220-72b7763e9a4a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the db8fa362-0ccb-4aa8-9220-72b7763e9a4a advisory. Jenkins Security Advisory: Arbitrary file read vulnerability through agent connections can lea...
CVE-2024-6893
Journyx CVE-2024-6893 is an XML External Entity (XXE) vulnerability in the soap_cgi.pyc API handler of Journyx 11.5.4. An unauthenticated attacker can send SOAP requests with XML references to external entities, enabling reading local files, SSRF, and DoS by resource exhaustion. The connected Kor...
GHSA-H856-FFVV-XVR4 Jenkins Remoting library arbitrary file read vulnerability
Jenkins uses the Remoting library typically agent.jar or remoting.jar for the communication between controller and agents. This library allows agents to load classes and classloader resources from the controller, so that Java objects sent from the controller build steps, etc. can be executed on...
Jenkins Remoting library arbitrary file read vulnerability
Jenkins uses the Remoting library typically agent.jar or remoting.jar for the communication between controller and agents. This library allows agents to load classes and classloader resources from the controller, so that Java objects sent from the controller build steps, etc. can be executed on...
SUSE CVE-2024-6781
Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...
CVE-2024-43044: Improper Check for Unusual or Exceptional Conditions
Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the ClassLoaderProxyfetchJar method in the Remoting library...
PT-2024-37934
Name of the Vulnerable Software and Affected Versions soap cgi.pyc affected versions not specified Description The issue allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources by including references to external entities...
jenkins -- multiple vulnerabilities
Jenkins Security Advisory: Description Critical SECURITY-3430 / CVE-2024-43044 Arbitrary file read vulnerability through agent connections can lead to RCE Description Medium SECURITY-3349 / CVE-2024-43045 Missing permission check allows accessing other users' "My Views"...
Arbitrary file read vulnerability through agent connections can lead to RCE
NOTE: This entry was updated on 2024-08-10 to add a reference to a https://github.com/jenkinsci-cert/SECURITY-3430workaround. Jenkins uses the https://github.com/jenkinsci/remotingRemoting library typically agent.jar or remoting.jar for the communication between controller and agents. This librar...
DEBIAN-CVE-2024-6781
Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...
CVE-2024-6781
Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...
UBUNTU-CVE-2024-6781
Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...
CVE-2024-6781
Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...
CVE-2024-6781 Calibre Arbitrary File Read
Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...
