com.amazonaws:codedeploy (>=1.3, <=1.11), com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (>=1.1.0, <=1.2.0) +18 more potentially affected by CVE-2017-2604 via org.jenkins-ci.main:jenkins-core (1.554)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.3, =1.1.0, =1.2.3, =1.1.0, =1.0, =1.0, =1.0, =2.0.4, =1.10, =1.15,...

QPluginLoader Component Confidential Data Access Data Compromise

The vulnerability of the QPluginLoader component in the cross-platform software development framework for Qt relates to the ability to load plugins from the working directory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and...

AZL-6837 CVE-2020-24742 affecting package qt5-qtsvg for versions less than 5.12.11-3

An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files...

Qt QLibrary security vulnerabilities

Qt QLibrary is a code framework and QLibrary is one of his libraries. A security vulnerability exists in Qt QLibrary versions prior to 5.14.0, which stems from QPluginLoader attempting to load a plugin relative to the working directory...

Qt QLibrary security vulnerabilities

Qt QLibrary is a code framework and QLibrary is one of his libraries. A security vulnerability exists in Qt QLibrary versions prior to 5.14.1 and prior to 5.12.7, which stems from QLibrary attempting to load a plugin relative to a working directory...

CVE-2021-30209

Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background without any security verification, which may lead to obtaining system permissions...

DEBIAN-CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2020-15592

SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes...

PT-2020-14517

Name of the Vulnerable Software and Affected Versions SteelCentral Aternity Agent versions prior to 11.0.0.120 Description The issue allows for privilege escalation via a crafted file. It involves an executable running as a high-privileged Windows service that performs administrative tasks and...

Ansible Configuration Management Path Traversal

The vulnerability of the Ansible configuration management system lies in the reading of the ansible.cfg file from the working directory. This file’s location can be altered, allowing the attacker to point it to a plugin or module that is under their control. Exploiting this vulnerability could...

(Pwn2Own) Huawei Reader Insecure Plugin Loading Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Huawei Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

CVE-2018-10170

NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a...

chromium: information leakage

The PDF viewer does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...

CVE-2015-1302

The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...

CVE-2015-1302

The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...

Mac OS X <= 10.4.8 pppd Plugin Loading Privilege Escalation Exploit

No description provided by source. Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit http://www.exploit-db.com/sploits/05252007-osxpppd.tar milw0rm.com 2007-05-25...

Code injection

Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream...

PT-2013-2765

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions through 10.7.5 Description The issue concerns a software update in Apple Mac OS X that fails to prevent plugin loading within the marketing-text WebView. This allows man-in-the-middle attackers to execute plugin code by...

CVE-2013-0973: Undefined Security Weakness

Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream...

Google Chrome < 17.0.963.79 Memory Corruption Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 17.0.963.79 and is, therefore, affected by memory corruption vulnerabilities related to plugin loading and GPU processing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...