PT-2019-3115

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools version 9.2 Description The issue is related to inadequate access control in the Web Runtime component of JD Edwards EnterpriseOne Tools, allowing a low-privileged attacker with network access via HTTP to...

MikroTik RouterOS Directory Traversal Vulnerability (CVE-2019-3943)

MikroTik RouterOS is prone to an authenticated directory traversal vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2019-11358 · Vmware +1 · Vrealize Automation Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins VMware vRealize Automation Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master or controller. These credentials c...

CSRF vulnerability and missing permission check in sinatra-chef-builder allow SSRF

A missing permission check in a form validation method in sinatra-chef-builder allows users with Overall/Read permission to initiate a connection test to an attacker-specified server. Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability...

trac-publisher-plugin stores credentials in plain text

trac-publisher-plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

CVE-2019-9922

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files...

PT-2019-11333 · Jenkins · Jenkins Slack Notification Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Slack Notification Plugin versions 2.19 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs,...

CVE-2018-15817

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file...

CVE-2018-15816

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file...

Code injection

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file...

CVE-2018-15816

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file...

CVE-2018-15817

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file...

Design/Logic Flaw

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file...

CVE-2018-15817

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file...

CVE-2018-15817

CVE-2018-15817 affects FastStone Image Viewer 6.5, where a crafted image file can trigger a Read Access Violation in the Block Data Move path starting at image00400000+0x2d63. The vulnerability is caused by processing specially crafted images, potentially crashing the application and causing deni...

CVE-2018-15816

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file...

CVE-2018-15816

CVE-2018-15816 affects FastStone Image Viewer 6.5. The vulnerability is a Read Access Violation in block data move triggered by a crafted image file (starting at image00400000+0x2d7d). Public documents corroborate this description across multiple sources, with some noting a possible DoS behavior ...

PT-2019-9188

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.5 Description The issue concerns a Read Access Violation on Block Data Move, which can be triggered by a crafted image file. This suggests a potential problem with how the software handles image data...

PT-2019-9187

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.5 Description The issue concerns a Read Access Violation on Block Data Move, which can be triggered by a crafted image file. This suggests a potential problem with how the software handles image data...

CVE-2018-15816: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file...