1947 matches found
jenkins: job configuration issues (SECURITY-127, SECURITY-128)
Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...
[SECURITY] Fedora 22 Update: jenkins-1.609.3-5.fc22
Jenkins is an award-winning application that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Among those things, current Jenkins focuses on the following two jobs: - building/testing software projects continuously. In a nutshell, Jenkins provides an...
jobs.accor.com XSS vulnerability
Vulnerable URL: https://jobs.accor.com/Pages/Popin/LoginApplicant.aspx?IdOffer=198526%22%20onmouseover%3dpromptString.fromCharCode88,83,83,80,79,83,69,68%20bad%3d%22=4=Basket=3f29c421-e882-4fa5-9db8-5e36691757e9 Details: Description| Value ---|--- Patched:| Yes, at 19.05.2016 Latest check for...
[SECURITY] Fedora 22 Update: jenkins-1.609.3-4.fc22
Jenkins is an award-winning application that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Among those things, current Jenkins focuses on the following two jobs: - building/testing software projects continuously. In a nutshell, Jenkins provides an...
EUVD-2015-8211
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...
CVE-2015-6765
CVE-2015-6765 is a use-after-free in Google Chrome’s AppCache (file content/browser/appcache/appcache_update_job.cc) that could allow a remote attacker to execute arbitrary code or cause a denial of service on Chrome versions prior to 47.0.2526.73. The vulnerability was publicly disclosed in mult...
UBUNTU-CVE-2015-6765
Use-after-free vulnerability in content/browser/appcache/appcacheupdatejob.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs...
cups-filters: texttopdf heap-based buffer overflow
A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker able to submit print jobs could use this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of the "lp" us...
cups-filters: texttopdf integer overflow
An integer overflow flaw, leading to a heap-based buffer overflow, was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker able to submit print jobs could use this flaw to crash texttopdf or, possibly, execute arbitrary...
oysterpartnership.com XSS vulnerability
Vulnerable URL: http://www.oysterpartnership.com/jobboard/cands/jobResults.asp?c=1=Reception+Jobs%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2015 Latest check for patch:| 23.11.2015 00:10 GMT Vulnerability type:| XSS Vulnerability...
tltpmedical.co.uk XSS vulnerability
Vulnerable URL: http://www.tltpmedical.co.uk/jobs.asp?searchterm=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7992971 Google...
hungaryjobs77.com XSS vulnerability
Vulnerable URL: http://www.hungaryjobs77.com/jobs?wt=%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E=mnl Details: Description| Value ---|--- Patched:| Yes, at 21.10.2015 Latest check for patch:| 21.10.2015 10:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
middleeastjobs77.com XSS vulnerability
Vulnerable URL: http://www.middleeastjobs77.com/jobs?wt=%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E=mnl Details: Description| Value ---|--- Patched:| Yes, at 21.10.2015 Latest check for patch:| 21.10.2015 10:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
qatarjobs77.com XSS vulnerability
Vulnerable URL: http://www.qatarjobs77.com/jobs?wt=%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E=mnl Details: Description| Value ---|--- Patched:| Yes, at 21.10.2015 Latest check for patch:| 21.10.2015 10:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 889697...
thedrum.com XSS vulnerability
Vulnerable URL: http://www.thedrum.com/jobs/search/ Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21788 Google Pagerank| 6 VIP website status:| Yes Check...
74cms jobs-list.php接口sql注入
首页 招聘信息 点击搜索 http://demo.74cms.com/jobs/jobs-list.php?sort=wage&page=1&jobcategory=&education=&citycategory=&experience=&settr=3&trade=&wage=&nature= 参数sort存在SQL注入...
Debian DLA-314-1 : cups security update
Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote attackers to crash texttopdf or possibly execute arbitrary code. For Debian 6...
[SECURITY] [DLA 314-1] cups security update
Package : cups Version : 1.4.4-7+squeeze10 CVE ID : CVE-2015-3258 CVE-2015-3279 Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote...
SAP NetWeaver J2EE Engine BP_FIND_JOBS_WITH_PROGRAM Function Module SQL Injection Vulnerability
SAP NetWeaver J2EE Engine is a service-oriented SAP SAP company's integrated application platform J2EE engine. BPFINDJOBSWITHPROGRAM function is one of the find the request for the specified program module. A SQL injection vulnerability exists in the BPFINDJOBSWITHPROGRAM function module in SAP...