10343 matches found
RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin
Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
CVE-2020-35511
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.05 patches applied via a crafted png file...
DEBIAN-CVE-2020-35511
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.05 patches applied via a crafted png file...
UBUNTU-CVE-2020-35511
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.05 patches applied via a crafted png file...
CVE-2022-38665
Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
CVE-2022-38665
Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
Design/Logic Flaw
Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
CVE-2022-38665
Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
PT-2022-24515 · Jenkins · Jenkins Collabnet Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins CollabNet Plugins Plugin versions 2.0.8 and earlier Description: The issue concerns the storage of a RabbitMQ password in an unencrypted form within the global configuration file on the Jenkins controller. This allows users with acces...
SonicWall Global Management System (GMS) Web Interface Detection
Binary data sonicwallgmswebdetect.nbin...
libpng pngcheck 缓冲区错误漏洞
libpng pngcheck is a software written in C by the libpng organization that verifies the integrity of PNG, JNG and MNG files based on checking the internal 32-bit CRC, aka checksum and decompressing the image data. A buffer error vulnerability exists in libpng pngcheck version 2.4.0, which stems...
Jenkins Plugin CollabNet 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
OSV-2022-755 Global-buffer-overflow in chunk_obj_alloc
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50436 Crash type: Global-buffer-overflow READ 8 Crash state: chunkobjalloc chunkallocbytearrayimmovable szliballoc...
PT-2022-37203 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves several functions, including chunk obj alloc,...
CVE-2022-30945
A flaw was found in Jenkins Groovy Plugin. The plugin allows pipelines to load Groovy source files. The intent is to allow Global Shared Libraries to execute without sandbox protection. The issue is that the plugin allows any Groovy source files bundled with Jenkins core and plugins to be loaded...
Ukraine war spotlights agriculture sector's vulnerability to cyber attack
By Joe Marshall. The war in Ukraine has caused massive problems for global food supplies, underscoring the high impact of disruptive events to agriculture entities and related organizations. The challenges to the Ukrainian agriculture sector imposed by the war--and global ripple effects--have bee...
CVE-2022-38236
XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...
CVE-2022-38236
XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...