411 matches found
CloudBees Jenkins CI and LTS Cross-Site Scripting Vulnerability
CloudBees Jenkins CI formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI. A cross-site scripting vulnerability exists in CloudBees Jenkins CI versions prior to 1.606 and LT...
CloudBees Jenkins CI and LTS Scripting Vulnerabilities
CloudBees Jenkins CI formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI. A security vulnerability exists in the Combination filter Groovy script in CloudBees Jenkins CI...
CloudBees Jenkins CI and LTS API token-issuing service vulnerability
CloudBees Jenkins CI formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI. A security vulnerability exists in the API token-issuing service in CloudBees Jenkins CI versions...
USN-2622-1 openldap vulnerabilities
It was discovered that OpenLDAP incorrectly handled certain search queries that returned empty attributes. A remote attacker could use this issue to cause OpenLDAP to assert, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. CVE-2012-1164 Michael Vishchers discovered th...
USN-2540-1 gnutls26, gnutls28 vulnerabilities
It was discovered that GnuTLS did not perform date and time checks on CA certificates, contrary to expectations. This issue only affected Ubuntu 10.04 LTS. CVE-2014-8155 Nikos Mavrogiannopoulos discovered that GnuTLS incorrectly verified that signature algorithms matched. A remote attacker could...
CVE-2014-2061
The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value...
CVE-2014-2060
The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors...
PT-2014-5444 · Cloudbees +1 · Jenkins
Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 1.583 Jenkins LTS versions prior to 1.565.3 Description: The issue allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code, due to improper...
jenkins: remote code execution flaw (SECURITY-150)
Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...
jenkins: directory traversal flaw (SECURITY-131)
Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors...
jenkins: stored cross-site scripting flaw (SECURITY-74)
Cross-site scripting XSS vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."...
Fedora 20 : mediawiki-1.23.2-1.fc20 (2014-9583)
This is a major update from the 1.21 branch to the 1.23 long term support branch. - bug 68187 SECURITY: Prepend jsonp callback with comment. - CVE-2014-5241 - bug 66608 SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in JavaScript,instead of relying on the U...
[SECURITY] [DSA 2907-1] Announcement of long term support for Debian oldstable
------------------------------------------------------------------------- Debian Security Advisory DSA-2907-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 16, 2014 http://www.debian.org/security/faq -...
jenkins: cross-site request forgery (CSRF) protection mechanism bypass
Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors...
PowerShell LTS v7.2.18 (x64)
PowerShell LTS v7.2.18 x64...
PowerShell LTS v7.4.13 (x64)
PowerShell LTS v7.4.13 x64...
PowerShell LTS v7.2.14 (x64)
PowerShell LTS v7.2.14 x64...
PowerShell LTS v7.2.12 (x64)
PowerShell LTS v7.2.12 x64...