1948 matches found
SA-CONTRIB-2015-008 - Batch Jobs - Cross Site Request Forgery (CSRF)
The Batch Jobs project is a scalable way to execute a list of tasks. Links that take actions on batch jobs are not protected from Cross Site Request Forgery CSRF. A malicious individual could cause a user that has permission to access a particular batch job or an administrator to delete the recor...
Apple CUPS cupsdDoSelect Remote Code Execution attack - Ver2 (CVE-2009-3553)
A code execution vulnerability has been reported in Apple Cups. An attacker could exploit this vulnerability via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. Successful exploitation of this vulnerability could allow a...
[SECURITY] Fedora 21 Update: jenkins-1.590-1.fc21
Jenkins is an award-winning application that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Among those things, current Jenkins focuses on the following two jobs: - building/testing software projects continuously. In a nutshell, Jenkins provides an...
[SECURITY] Fedora 21 Update: jenkins-external-monitor-job-plugin-1.4-1.fc21
This package provides Jenkins plugin which adds the ability to monitor the result of externally executed jobs...
LinEnum - Local Linux Enumeration & Privilege Escalation Checks
LinEnum will automate many of the checks that I’ve documented in the Local Linux Enumeration & Privilege Escalation Cheatsheet. It’s a very basic shell script that performs over 65 checks, getting anything from kernel information to locating possible escalation points such as potentially useful...
XOOPS Module Jobs Remote SQL Injection (CVE-2007-2370)
An SQL injection vulnerability has been reported in Xoops John Mordo Jobs Module. An attacker could exploit this vulnerability via the cid parameter in a jobsview action. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected...
[SECURITY] Fedora 19 Update: torque-3.0.4-5.fc19
TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....
CVE-2014-2058
BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330...
CVE-2014-2058
BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330...
CVE-2014-2058
CVE-2014-2058 affects Jenkins (BuildTrigger) where authenticated remote users could bypass access restrictions and trigger arbitrary jobs by configuring a job to trigger another. Affected versions are Jenkins before 1.551 and LTS before 1.532.2. The issue is described as a result of an incomplete...
CVE-2014-2058
BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330...
CVE-2014-3663
Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...
Design/Logic Flaw
Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...
PT-2014-5441 · Cloudbees +1 · Jenkins
Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 1.583 Jenkins LTS versions prior to 1.565.3 Description: The issue allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions. This can lead to the creation or destruction of...
Fedora 19 : cups-1.6.4-10.fc19 (2014-9703)
Upstream patches have been applied to prevent long-running Get-Jobs operations preventing other requests from being handled, and to fix the order of completed jobs in Get-Jobs responses. This update fixes a security flaw potentially leading to a disclosure of information. Note that Tenable Networ...
PT-2014-2692 · Openmediavault · Openmediavault
Name of the Vulnerable Software and Affected Versions: OpenMediaVault affected versions not specified Description: The issue allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter in the Cron service in rpc.php...
CVE-2014-6770
The Aerospace Jobs aka com.appaerospacejobs.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Aerospace Jobs aka com.appaerospacejobs.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6770
The Aerospace Jobs aka com.appaerospacejobs.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6770
CVE-2014-6770 affects the Aerospace Jobs Android app (com.app_aerospacejobs.layout) version 1.399. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The co...