7650 matches found
Sandbox Protection Bypass
Jenkins Matrix Project Plugin is vulnerable to sandbox protection bypass vulnerability. This exists in the src/main/java/hudson/matrix/FilterScript.java which allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM...
Sandbox Protection Bypass
Jenkins Script Security Plugin is vulnerable to sandbox protection bypass vulnerability. This exists in the src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java which allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint...
Arbitrary Code Execution
Jenkins Pipeline in Groovy Plugin is vulnerable to arbitrary code execution attacks. This exists in the src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java which allows attackers to control pipeline scripts to execute arbitrary code on the Jenkins master JVM...
CVE-2019-8387
MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component...
CVE-2019-8387
MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component...
CVE-2019-8387
CVE-2019-8387 affects Master IP CAM 01 running 3.3.4.2103. The issue is a remote command execution vulnerability in the thttpd component, enabling an attacker to execute arbitrary commands remotely. Public dumps in the connected sources show a working exploit script targeting multiple CGI endpoin...
Siemens SIPLUS DP-MASTER INTERFACE FOR IM151-7 CPU Detection
Binary data 750339.prm...
GE IC695EDM001 PACSystems RX3i DNP3 Ethernet Master Detection
Binary data 755488.prm...
Siemens DP-Master CM 1243-5 Communications Adapter Detection
Binary data 750152.prm...
Siemens AS-Interface Master Communications Adapter Detection
Binary data 750325.prm...
Entek XM-440 Master Relay Module Specialty I/O
Binary data 754840.prm...
Siemens CM 1243-2 AS-i Master Communications Adapter Detection
Binary data 750155.prm...
GE IC694DNM200 PACSystems RX3i DeviceNet Master Module Detection
Binary data 755487.prm...
Rockwell Automation POINT I/O 4 Point IO-Link Master 1734-4IOL IO-Link Master Device
Binary data 754746.prm...
Siemens IO-Link Master Communications Adapter Detection
Binary data 750326.prm...
GE IC695PBM300 PACSystems RX3i PROFIBUS Master Module Detection
Binary data 755484.prm...
Mitsubishi FX3U-16CCL-M Communications Adapter Detection
Binary data 752113.prm...
keystone/fuzz_asm_x86_64: Bad-cast to llvm_ks::X86OperandX86AsmParser::MatchAndEmitATTInstruction in AsmParser::parseStatement
Detailed report: https://oss-fuzz.com/testcase?key=5121855985287168 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmx8664 Fuzz target binary: fuzzasmx8664 Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000210d120 Crash State: Bad-cast to...
CVE-2019-10316
Jenkins Aqua MicroScanner Plugin 1.0.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...