CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

Command injection

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

CVE-2020-10786

CVE-2020-10786 affects Vesta Control Panel (VestaCP) w/ versions 0.9.8-26 and earlier. A remote command execution is possible because an authenticated user can abuse the cron jobs module to run arbitrary commands on the underlying system. Impact is high (remote, unauthenticated? actually authenti...

CVE-2020-10786: Incorrect Authorization

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

PT-2020-12320

Name of the Vulnerable Software and Affected Versions Vesta Control Panel versions 0.9.8-26 Description A remote command execution issue allows any authenticated user to execute arbitrary commands on the system via cron jobs. Recommendations For versions 0.9.8-26, consider restricting access to...

EulerOS Virtualization 3.0.2.2 : cups (EulerOS-SA-2020-1461)

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by...

jobs-arab.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1141039 Security Researcher ELProfesor Helped patch 2791 vulnerabilities Received 8 Coordinated Disclosure badges Received 106 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting jobs-arab.com website...

jobs-arab.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1138324 Security Researcher ELProfesor Helped patch 2791 vulnerabilities Received 8 Coordinated Disclosure badges Received 106 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting jobs-arab.com website...

Cross-site Request Forgery (CSRF)

cups is vulnerable to cross-site request forgery CSRF. The vulnerability exists as a remote attacker could trick a user, who is logged into the CUPS web interface as an administrator, into visiting a specially-crafted website, the attacker could reconfigure and disable CUPS, and gain access to...

Denial Of Service (DoS)

cups is vulnerable to denial of service DoS. The vulnerability exists as a null pointer dereference flaw was found in the way CUPS handled subscriptions for printing job completion notifications. A local user could use this flaw to crash the CUPS daemon by submitting a large number of printing jo...

Denial Of Service (DoS)

The vixie-cron package is vulnerable to Denial Of Service DoS. A local user with the ability to create a hardlink to /etc/crontab can prevent vixie-cron from executing certain system cron jobs...

PT-2020-5053 · Jenkins · Jenkins Rapiddeploy Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins RapidDeploy Plugin versions 4.2 and earlier Description: The issue arises from the plugin not escaping package names in the table of packages obtained from a remote server, resulting in a stored cross-site scripting XSS vulnerability...

Stored XSS vulnerability in rapiddeploy-jenkins

rapiddeploy-jenkins 4.2 and earlier does not escape package names in its displayed table of packages obtained from a remote server. This results in a stored cross-site scripting XSS vulnerability exploitable by users able to configure jobs. rapiddeploy-jenkins 4.2.1 escapes package names...

EulerOS Virtualization for ARM 64 3.0.2.0 : cups (EulerOS-SA-2020-1227)

According to the version of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attacke...

PT-2020-18456

Name of the Vulnerable Software and Affected Versions Cloud Foundry Cloud Controller CAPI versions prior to 1.91.0 Description The issue allows a malicious user with access to logs to potentially gain unauthorized access to resources protected by credentials, as sensitive information such as...

Exchange Backup Jobs Warning "Failed to find group owner account"

Challenge Backup jobs with Microsoft Exchange items may result in the warning message shown in both the Veeam Backup for Microsoft 365 console and the Veeam.Archiver.Proxy.log file. Processing mailbox $mailboxName completed with warning: Failed to find group owner account This appears in the...

CVE-2020-6855

A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to parameterize housekeeping jobs in a way that exhausts system resources and results in a denial of service...

CVE-2020-6856

An XML External Entity XEE vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of the XML documents that are used to specify the run-time settings of jobs and orders...