356 matches found
CVE-2016-3725
Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service service disruption...
CVE-2016-3725
Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service service disruption...
CVE-2016-3725
CVE-2016-3725 affects Jenkins before version 2.3 and Jenkins LTS before 1.651.2, due to a missing permissions check in Jenkins Core that allows remote authenticated users to trigger updating of update site metadata. This issue can be combined with DNS cache poisoning to cause a denial of service....
CVE-2016-3725
Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service service disruption...
Amazon Linux: Security Advisory (ALAS-2012-82)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...
OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...
OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...
OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...
OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...
RHEL 5 / 6 / 7 : java-1.6.0-openjdk (RHSA-2015:0808)
The remote Redhat Enterprise Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0808 advisory. - jar: directory traversal vulnerability CVE-2005-1080 - OpenJDK: incorrect handling of phantom references Hotspot, 8071931...
OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...
OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...
OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...
OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...
Mulesoft ESB Runtime 3.5.1 - Privilege Escalation Vulnerability
Exploit for jsp platform in category web applications Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code Execution Mulesoft ESB Runtime 3.5.1 allows any arbitrary authenticated user to create an administrator user due to a lack of permissions check in the...
CVE-2014-7156
The x86emulate function in arch/x86/x86emulate/x86emulate.c in Xen 3.3.x through 4.4.x does not check the supervisor mode permissions for instructions that generate software interrupts, which allows local HVM guest users to cause a denial of service guest crash via unspecified vectors...
Wordpress Buddypress Plugin 1.9.1 - Privilege Escalation
No description provided by source. Exploit Title: Wordpress plugin Buddypress = 1.9.1 privilege escalation Date: 11/02/2014 Exploit Author: Pietro Oliva Vendor Homepage: http://buddypress.org Software Link: http://downloads.wordpress.org/plugin/buddypress.1.9.1.zip Version: 1.9.1 CVE :...
Wordpress plugin Buddypress <= 1.9.1 privilege escalation vulnerability
Vulnerability: Wordpress plugin Buddypress = 1.9.1 privilege escalation Date: 13/02/2014 Author: Pietro Oliva Vendor Homepage: http://buddypress.org Software Link: http://downloads.wordpress.org/plugin/buddypress.1.9.1.zip Version: 1.9.1 CVE : CVE-2014-1889 Responsibly disclosed and patched in...
WordPress Buddypress 1.9.1 Privilege Escalation Vulnerability
WordPress Buddypress plugin versions 1.9.1 and below suffer from a privilege escalation vulnerability. Vulnerability: Wordpress plugin Buddypress 2 Visit the url http://example.com/groups/create/step/group-details/ 3 Enjoy the power 0day.today 2018-04-01...