Cross-site Scripting (XSS)

qunit is vulnerable to cross-site scripting XSS. The vulnerability exists as it does not escape the value of details.source in innerHTML of reporter/html.js...

Crash Reporter Component Memory Corruption Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple iPadOS is an operating system for iPad tablets. crash Reporter is one of the components used to Crash Reporter is one of the components used to debug the program and record...

CVE-2020-15419

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.75020200415. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReporterImportLicense class. Due to the improper restriction of...

About the security content of iOS 13.6 and iPadOS 13.6

About the security content of iOS 13.6 and iPadOS 13.6 This document describes the security content of iOS 13.6 and iPadOS 13.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of tvOS 13.4.8

About the security content of tvOS 13.4.8 This document describes the security content of tvOS 13.4.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 6.2.8

About the security content of watchOS 6.2.8 This document describes the security content of watchOS 6.2.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Veeam ONE XML External Entity Reference Vulnerability

Veeam ONE is a suite of IT monitoring and reporting tools from Veeam Switzerland. An XML external entity reference vulnerability exists in the Veeam ONE ReporterImportLicense class, which can be exploited by an attacker with the help of a specially crafted document to cause information disclosure...

azulrecreo.com Cross Site Scripting vulnerability OBB-1222390

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Unspecified Vulnerability in CloudBees Jenkins GitHub Coverage Reporter Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . GitHub Coverage Reporter Plugin is used in one...

CVE-2020-2212

Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system or read permissions on the system configuration...

CVE-2020-2212

Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system or read permissions on the system configuration...

Design/Logic Flaw

Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system or read permissions on the system configuration...

CVE-2020-2212

Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system or read permissions on the system configuration...

CVE-2020-2212

CVE-2020-2212 affects Jenkins GitHub Coverage Reporter Plugin ≤1.8, with secrets stored unencrypted in the global configuration on the Jenkins master. The GitHub access token is saved in io.jenkins.plugins.gcr.PluginConfiguration.xml and can be viewed by anyone with master-file-system access or r...

PT-2020-15427 · Jenkins · Jenkins Github Coverage Reporter Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins GitHub Coverage Reporter Plugin versions 1.8 and earlier Jenkins GitHub Coverage Reporter Plugin versions 1.10 and earlier Description: The issue concerns the storage of secrets in plain text in the global configuration file on the...

omt.wifidb.net Cross Site Scripting vulnerability OBB-1202256

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

zonnetprovedor.net.br Cross Site Scripting vulnerability OBB-1197853

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

righettiridolfi.com Cross Site Scripting vulnerability OBB-1193807

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

gotoanr.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1189044 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

OpenSSL Vulnerabilities Sep 2019 – Apr 2020

Summary Symantec Web Security Group WSG products using affected versions of OpenSSL may be susceptible to multiple vulnerabilities. A local or remote attacker can obtain private key or other secret key information. A remote attacker can also cause denial of service. Affected Products The followin...