Lucene search
+L

10981 matches found

Github Security Blog
Github Security Blog
added 2022/07/28 12:00 a.m.60 views

Arbitrary file write vulnerability in Jenkins CLIF Performance Testing plugin

An arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin 64.vc0d66de1dfbf and earlier allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content...

6.5CVSS6.7AI score0.0075EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/07/28 12:00 a.m.59 views

Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5536-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5536-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could...

9.8CVSS7.5AI score0.00748EPSS
SaveExploits0References7
NVD
NVD
added 2022/07/27 10:15 p.m.13 views

CVE-2022-1859

Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00804EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/27 10:15 p.m.2 views

DEBIAN-CVE-2022-1859

Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.00804EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/27 10:15 p.m.13 views

Design/Logic Flaw

Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS9AI score0.00804EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/27 10:15 p.m.11 views

CVE-2022-1859

Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00804EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/07/27 10:15 p.m.33 views

CVE-2022-1859

Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00804EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/27 10:15 p.m.4 views

UBUNTU-CVE-2022-1859

Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00804EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/07/27 9:17 p.m.28 views

CVE-2022-1859

Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

9.3AI score0.00804EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2022/07/27 9:17 p.m.46 views

CVE-2022-1859

Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.5AI score0.00804EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/07/27 9:17 p.m.62 views

CVE-2022-1859

Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.2AI score0.00804EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/07/27 3:15 p.m.3 views

CVE-2022-36894

An arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin 64.vc0d66de1dfbf and earlier allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content...

6.5CVSS6AI score0.0075EPSS
SaveExploits0References3
CVE
CVE
added 2022/07/27 2:23 p.m.112 views

CVE-2022-36894

CVE-2022-36894 concerns an arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin (64.vc0d66de1dfb_f and earlier). The issue allows attackers with Overall/Read permissions to create or replace arbitrary files on the Jenkins controller filesystem with content of their choosi...

6.5CVSS6.4AI score0.0075EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2022/07/27 2:23 p.m.120 views

CVE-2022-36894

An arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin 64.vc0d66de1dfbf and earlier allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content...

6.5CVSS5AI score0.0075EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/27 8:43 a.m.10 views

OPENSUSE-SU-2022:10067-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Save and restore FPU status during interrupt. boo1199803 - Update support of building with Python - Replace SDL-devel BuildRequires with pkgconfigsdl: allow to use sdl12compat as an alternative. Version bump to 6.1.36 released by Oracle Jul...

8.2CVSS5.8AI score0.00427EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2022/07/27 12:00 a.m.11 views

PT-2022-4032 · Jenkins · Jenkins Clif Performance Testing Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CLIF Performance Testing Plugin versions 64.vc0d66de1dfb f and earlier Description: The issue is related to an arbitrary file write vulnerability. This vulnerability allows attackers with Overall/Read permission to create or replace...

8.8CVSS6.2AI score0.0075EPSS
SaveExploits0References8
OSV
OSV
added 2022/07/27 12:00 a.m.7 views

UBUNTU-CVE-2022-36316

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

6.1CVSS6.7AI score0.00318EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/07/27 12:00 a.m.40 views

CVE-2022-36316

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

6.1CVSS6.6AI score0.00318EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/07/27 12:00 a.m.61 views

Mozilla Firefox < 103.0

The version of Firefox installed on the remote Windows host is prior to 103.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-28 advisory. - Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs...

9.8CVSS6.8AI score0.00748EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2022/07/27 12:00 a.m.40 views

Jenkins CLIF Performance Testing Plugin 路径遍历漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A path traversal...

6.5CVSS6.8AI score0.0075EPSS
SaveExploits0References6
Rows per page
Query Builder