2308 matches found
JS JOBS FREE extension SQL Injection Vulnerability
Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. JS JOBS FREE extension is used in which an online recruitment plug-ins. JS JOBS FREE extension 1.2.7 before version for Joomla! in the...
The Best Templates for Posting Cybersecurity Jobs
The cybersecurity of a company is heavily reliant upon the skills and knowledge of the people who install, manage and operate its security products. This means that recruiting and nurturing the best security team possible should be a CISOâs top priority. Cynetâs Ultimate Cybersecurity Job Posting...
CVE-2019-16568
Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations...
CVE-2019-16568
Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations...
jobs-beim-staat.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1040076 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Apple macOS Catalina CUPS Component Buffer Overflow Vulnerability
Apple macOS Catalina is a set of Apple's proprietary operating systems developed specifically for Mac computers.CUPS is one of the open source printing system components for OS X and Unix-like systems. A buffer overflow vulnerability exists in the CUPS component in Apple macOS Catalina versions...
EulerOS 2.0 SP2 : cups (EulerOS-SA-2019-2422)
According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs...
EulerOS 2.0 SP5 : cups (EulerOS-SA-2019-2135)
According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs...
jobs.streetsblog.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-999007 Security Researcher g0bl1nsec Helped patch 3741 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting jobs.streetsblog.org websi...
js jobs,1.1.5, 1.1.6, 1.2.5 and 1.2.6,Other
js jobs,1.1.5, 1.1.6, 1.2.5 and 1.2.6,Other Extension Update Details Fix the file security bug. new version number 2.1.7...
October 3, 2019âKB4524150 (OS Build 16299.1421)
None None...
CVE-2019-17045
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab...
CVE-2019-17045
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab...
Cross site scripting
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab...
CVE-2019-17045
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab...
CVE-2019-17045
The CVE-2019-17045 entry concerns Ilch CMS 2.1.22 with a stored XSS in the Jobs Tab, exploitable via the title, text, or email id fields. Root cause cited by CNVD-2019-42862 is lack of proper validation of client-side data. Consequences include execution of client-side code in authenticated conte...
Denial Of Service (DoS)
apostrophe is vulnerable to denial of service DoS. It does not limit a user with a login privileges to initiate multiple batch jobs requests, eventually exhausting available memory by submitting thousands of batch job requests...
PT-2019-14923
Name of the Vulnerable Software and Affected Versions Ilch version 2.1.22 Description The issue allows for stored XSS attacks through the title, text, or email id in the Jobs Tab. Recommendations For Ilch version 2.1.22, update to a version that fixes this issue, as using the current version may...
CVE-2019-17045: Improper Neutralization of Input During Web Page Generation
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab...
datatheorem-mobile-app-security stored credentials in plain text
datatheorem-mobile-app-security stored a proxy password unencrypted in job config.xml files on the Jenkins controller. This password could be viewed by users with Extended Read permission, or access to the Jenkins controller file system. datatheorem-mobile-app-security now stores the proxy passwo...