Lucene search
K

662 matches found

CNNVD
CNNVD
added 2022/02/21 12:0 a.m.4 views

HCL Sametime 安全漏洞

HCL Sametime is a conferencing solution from HCL Software. A path traversal vulnerability exists in HCL Sametime that stems from the fact that HCL Sametime for Android is susceptible to multiple path traversal vulnerabilities...

5.5CVSS5.8AI score0.00082EPSS
Exploits0References2
CNVD
CNVD
added 2019/08/23 12:0 a.m.2 views

CloudBees Jenkins Sametime Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Sametime Plugin is used in one of the...

8.8CVSS6.9AI score0.00075EPSS
Exploits0References1
NVD
NVD
added 2019/04/04 4:29 p.m.11 views

CVE-2019-10297

Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.8CVSS8.7AI score0.00075EPSS
Exploits0References3
Prion
Prion
added 2019/04/04 4:29 p.m.11 views

Design/Logic Flaw

Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

4CVSS8.6AI score0.00075EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2019/04/04 3:38 p.m.21 views

CVE-2019-10297

Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.8CVSS3.6AI score0.00075EPSS
Exploits0References3
CVE
CVE
added 2019/04/04 3:38 p.m.48 views

CVE-2019-10297

CVE-2019-10297 affects the Jenkins Sametime Plugin. The vulnerability arises because credentials are stored unencrypted in the plugin’s global configuration on the Jenkins master, specifically within hudson.plugins.sametime.im.transport.SametimePublisher.xml, and can be read by anyone with access...

8.8CVSS8.6AI score0.00075EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/04/04 3:38 p.m.12 views

CVE-2019-10297

Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.7AI score0.00075EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2019/04/04 12:0 a.m.3 views

PT-2019-11699 · Jenkins · Jenkins Sametime Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Sametime Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, the credential...

8.8CVSS8.5AI score0.00075EPSS
Exploits0References5
CNVD
CNVD
added 2018/02/26 12:0 a.m.1 views

IBM Sametime Information Disclosure Vulnerability (CNVD-2018-06309)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime. A remote attacker can exploit this...

5.3CVSS6.5AI score0.00164EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/02/23 12:0 a.m.20 views

IBM Sametime Detection

Detection of IBM Sametime. The script sends a connection request to the server and attempts to detect IBM Sametime. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

6.9AI score
Exploits0References1
Prion
Prion
added 2018/02/08 11:29 p.m.11 views

Design/Logic Flaw

IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048...

5CVSS6AI score0.00164EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2018/02/08 11:29 p.m.11 views

CVE-2012-3331

IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048...

5.3CVSS4.9AI score0.00164EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/02/08 11:0 p.m.13 views

CVE-2012-3331

IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048...

4.9AI score0.00164EPSS
Exploits0References2
CVE
CVE
added 2018/02/08 11:0 p.m.36 views

CVE-2012-3331

IBM Sametime is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data from the Sametime Log database by making a direct request to STLOG.NSF. The available references describe the issue as an information leak (X-Force ID 78048) but do not provide pro...

5.3CVSS4.9AI score0.00164EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2017/08/30 12:0 a.m.2 views

IBM Sametime Web Player Arbitrary Script Injection Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video.IBM Sametime WebPlayer is one of the video-enabled plug-ins designed for browsers. A securi...

6.8CVSS6.5AI score0.00315EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/30 12:0 a.m.3 views

IBM Sametime Cross-Site Scripting Vulnerability (CNVD-2017-27544)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A cross-site scripting vulnerability exists in IBM Sametime versions 8.5.2 and 9.0. A remo...

5.4CVSS5.5AI score0.00269EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/30 12:0 a.m.4 views

IBM Sametime Information Disclosure Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime versions 8.5.2 and 9.0, which can be...

5.3CVSS5.5AI score0.00222EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/30 12:0 a.m.2 views

IBM Sametime Information Disclosure Vulnerability (CNVD-2017-30590)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime versions 8.5.1 and 9.0. An attacker can...

4.3CVSS4.8AI score0.00212EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/30 12:0 a.m.9 views

IBM Sametime Session Enumeration Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime versions 8.5.2 and 9.0. An attacker could...

4.3CVSS4.8AI score0.00212EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/30 12:0 a.m.2 views

IBM Sametime Meeting Server Information Disclosure Vulnerability (CNVD-2017-27543)

IBM Sametime is a set of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data, and video.Sametime Meeting Server is one of the Web conferencing components used in Sametime chat and...

4.3CVSS4.5AI score0.00212EPSS
Exploits0References1
Rows per page
Query Builder