2753 matches found
Jenkins 安全漏洞
Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Metrics Plugin in version 4.0.2.8 and earlier is vulnerable to an authorization issue that stems from an unencrypt...
CVE-2022-20621: Insufficiently Protected Credentials
Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
Access key stored in plain text by metrics
metrics 4.0.2.8 and earlier stores access keys unencrypted in its global configuration file jenkins.metrics.api.MetricsAccessKey.xml on the Jenkins controller as part of its configuration. This access key can be viewed by users with access to the Jenkins controller file system. metrics 4.0.2.8.1...
CVE-2022-22267
Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...
CVE-2022-22267
Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...
Samsung SMR 安全漏洞
Samsung ActivityMetricsLogger is a progress measurement logger for Samsung mobile devices. An unauthorized access vulnerability exists in Samsung ActivityMetricsLogger that stems from an implicit intent hijacking scenario in ActivityMetricsLogger, which can be exploited by an attacker to obtain...
actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)
metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:GHSA-CWVC-87XQ-PC5M...
GHSA-CWVC-87XQ-PC5M Out-of-bounds Write and Race Condition in metrics-util
In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...
Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: net/http: limit growth of header canonicalization cache CVE-2021-44716 For more details about the security issues, including the impact, a CVSS score,...
CVE-2021-45704
An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...
CVE-2021-45704
An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...
CVE-2021-45704
An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...
PT-2021-27212
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15.10 Description A potential memory leak in the gpu metrics table of the Linux Kernel's drm/amd/pm module has been identified. The actual impact and attack plausibility of this issue have not yet been...
PT-2021-27168
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.87 Description A potential memory leak in the gpu metrics table of the Linux Kernel's drm/amd/pm module has been identified. The actual impact and attack plausibility of this issue have not yet been...
Rust 缓冲区错误漏洞
Rust, a general-purpose, compiled programming language from the Mozilla Foundation, has a security vulnerability in versions prior to Rust metrics-util crate 0.7.0 that can be exploited by attackers to cause memory corruption...
CVE-2021-45704
An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...
CVE-2021-45704
An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...
CVE-2021-45704
CVE-2021-45704 affects the Rust metrics-util crate prior to 0.7.0. The issue is a data race and potential memory corruption caused by AtomicBucket unconditionally implementing Send/Sync, which allows concurrent access to inner data that may not be Sync. Public advisories (Red Hat, OSV, GitHub, CN...
CVE-2021-45704: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...
