CVE-2022-27574

Improper input validation vulnerability in parseriloc and sheifdfinditemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker...

CVE-2022-27574

Improper input validation vulnerability in parseriloc and sheifdfinditemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker...

Stored Cross Site Scripting vulnerability in Item name parameter

Description Stored cross site scripting vulnerability on Item name parameter in Assest module. Add payload in item name and whenever the user add the item in his requested assest . The alert will trigger. Proof of Concept 1. Login to the demo account 2. Go to Asset functionality , add or edit an...

The vulnerability of the `store_sm_boundary_item` function in the `Nef_S2/SNC_io_parser.h` component of the CGAL algorithm library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the storesmboundaryitem function in the NefS2/SNCioparser.h library, a part of the computational geometry algorithm library CGAL, relates to reading data beyond the allowed buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the `store_sm_boundary_item` function in the `Nef_S2/SNC_io_parser.h` component of the CGAL algorithm library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the storesmboundaryitem function in the NefS2/SNCioparser.h library, a part of the computational geometry algorithm library CGAL, relates to reading data beyond the allowed buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the `libpff_item_tree_create_node` function in the library allows access to PFF and OFF files. This enables a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the libpffitemtreecreatenode function in the library for accessing PFF and OFF files is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause a service failure using a...

CVE-2022-28379

jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion...

CVE-2022-28379

jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion...

Arbitrary file deletion

jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion...

CVE-2022-28379

jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion...

CVE-2022-28379

jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion...

Missing permission check in Jenkins Job and Node ownership Plugin

A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job...

Cross-site Scripting in Jenkins SiteMonitor Plugin

Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin

The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows...

GHSA-85F9-W9CX-H363 Cross site request forgery in Jenkins Job and Node ownership Plugin

Job and Node ownership Plugin 0.13.0 and earlier does not perform a permission check in several HTTP endpoints. This allows attackers with Item/Read permission to change the owners and item-specific permissions of a job. Additionally, this endpoint does not require POST requests, resulting in a...

Arbitrary file read vulnerability in Jenkins Tests Selector Plugin

Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on the Jenkins controller...

Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin

Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-28156

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace...

CVE-2022-28159

Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-28159

Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...