PT-2018-9353

Name of the Vulnerable Software and Affected Versions Jenkins GitHub Plugin versions 1.29.0 and older Description A server-side request forgery issue exists that allows attackers with Overall/Read access to cause the server to send a GET request to a specified URL. This is due to a vulnerability ...

CVE-2018-1000190: Exposure of Sensitive Information to an Unauthorized Actor

A exposure of sensitive information vulnerability exists in Jenkins Black Duck Hub Plugin 4.0.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method...

CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

CVE-2017-18285: Incorrect Permission Assignment for Critical Resource

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

Libmobi Information Disclosure Vulnerability (CNVD-2018-10874)

Libmobi is a C-based language for processing Kindle MOBI format e-book document library . A security vulnerability exists in the 'mobidecompresshuffmaninternal' function of the compression.c file in Libmobi version 0.3. The vulnerability can be exploited by a remote attacker to disclose informati...

CVE-2018-11437

The mobireconstructparts function in parserawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2018-11435

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2018-11437

The mobireconstructparts function in parserawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2018-11435

Libmobi 0.3 is affected by a vulnerability in the function mobi_decompress_huffman_internal in compression.c, which allows a remote attacker to cause information disclosure via a crafted MOBI file, manifesting as a read access violation. This is corroborated across multiple sources (NVD/NVD-based...

CVE-2018-11437

The CVE-2018-11437 entry concerns Libmobi 0.3, where the mobi_reconstruct_parts function in parse_rawml.c can disclose information via a specially crafted MOBI file. The vulnerability is described as a read access disclosure, triggered by crafted input. No exploit details, affected versions beyon...

CVE-2018-11435

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2018-11435

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2018-11435

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2018-11437: Exposure of Sensitive Information to an Unauthorized Actor

The mobireconstructparts function in parserawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

PT-2018-10568

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure via a crafted mobi file, specifically through a read access violation in the mobi decompress huffman internal function. Recommendations For Libmo...

Microsoft Windows: Removable Disks: Deny read access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windisksdenyreadaccess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Removable Disks: Deny read access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: CD and DVD: Deny read access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincddvddenyreadaccess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for CD and DVD: Deny read access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Microsoft Windows: All Removable Storage classes: Deny all access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windenyallaccessremovablestorage.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for All Removable Storage classes: Deny all access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2018-11224

An issue was discovered in Libav 12.3. A read access violation in the intableinit16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...