Information disclosure

An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page...

CVE-2018-13365

An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page...

CVE-2018-13365

CVE-2018-13365 affects Fortinet FortiOS 6.0.1, 5.6.5 and earlier, where the Application Control Block page leaks the FortiGate’s private IP address and hostname. The root cause is information disclosure via the Application Control block page. Fortinet’s advisory FG-IR-18-085 (and related NT vulne...

CVE-2018-13365

An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page...

CVE-2018-13375

An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in...

CVE-2018-13375

An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in...

SUSE-SU-2019:1285-1 Security update for libvirt

This update for libvirt fixes the following issues: Security issue fixed: - CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode bsc1131595...

Apache Tomcat 9.0.x < 9.0.10 Security Misconfiguration

Binary data 700707.pasl...

CVE-2019-10314

Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM...

CVE-2019-10314

Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM...

CVE-2019-10317

Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM...

Code injection

Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM...

Code injection

Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM...

CVE-2019-10317

Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM...

CVE-2019-10317

The CVE-2019-10317 entry affects the Jenkins SiteMonitor Plugin (version 0.5 and earlier), which unconditionally disabled SSL/TLS certificate validation and hostname verification for the Jenkins controller JVM. Root cause: the plugin’s behavior bypassed standard TLS checks globally, exposing the ...

CVE-2019-10314

CVE-2019-10314 affects the Jenkins Koji Plugin, which disables SSL/TLS and hostname verification globally for the Jenkins master JVM. The vulnerability is described across multiple sources (NVD entry, Red Hat advisory, GHSA) as the plugin unconditionally bypassing certificate validation for the e...

CVE-2019-10314

Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM...

PT-2019-11716 · Jenkins · Jenkins Koji Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Koji Plugin affected versions not specified Description: The issue concerns the Jenkins Koji Plugin, which disables SSL/TLS and hostname verification globally for the Jenkins master JVM. This means the plugin unconditionally disables...

SUSE-SU-2018:3467-2 Security update for smt

SMT was updated to version 3.0.38. Following security issue was fixed: - CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup bsc1104076 Following non security issues were fixed: - Add migration path check when registration sharing is enabled - Fix sibling...

CVE-2018-20053

An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network...