Lucene search
K

29 matches found

OSV
OSV
added 2022/06/20 8:13 p.m.5 views

MAL-2022-4437 Malicious code in lyft-service-plugin-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11cae99f45bda0d06253e5365230657a357f371ef6c198cd92758d6f960e8a55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/11/17 12:0 a.m.2 views

PT-2021-7108 · Unknown +1 · Tuleap Community Edition +3

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 13.2.99.31 Community Edition Tuleap versions prior to 13.1-5 Enterprise Edition Tuleap versions prior to 13.2-3 Enterprise Edition Description: The issue arises from improper sanitization of the search filter built fr...

8.5CVSS6.7AI score0.0055EPSS
Exploits0References8
OSV
OSV
added 2020/03/25 5:15 p.m.1 views

CVE-2020-2168

Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

8.8CVSS7.9AI score
Exploits0References2
CVE
CVE
added 2020/03/25 4:5 p.m.63 views

CVE-2020-2168

CVE-2020-2168 affects the Jenkins Azure Container Service Plugin for Jenkins, with versions 1.0.1 and earlier. The root cause is that the plugin’s YAML parser does not restrict deserialization, allowing arbitrary types to be instantiated, which enables remote code execution (RCE). Impact is high ...

8.8CVSS9AI score0.00654EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/03/25 4:5 p.m.13 views

CVE-2020-2168

Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

9AI score0.00654EPSS
Exploits0References2
CNVD
CNVD
added 2017/12/02 12:0 a.m.2 views

Apache Struts2 S2-054 Denial of Service Vulnerability

Struts2 is Apache Software Foundation is responsible for maintaining a MVC-based design pattern of the Web application framework for open source projects. Apache Struts2 suffers from a S2-054 denial of service vulnerability. Because the Apache Struts REST plugin uses an outdated JSON-lib library ...

6.2CVSS6.9AI score0.01534EPSS
Exploits2References1
hackapp
hackapp
added 2016/04/01 9:22 a.m.17 views

PrinterOn Print Service Plugin - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PrinterOn Print Service Plugin published at the 'play' market has multiple vulnerabilities...

0.9AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:22 a.m.14 views

Samsung Print Service Plugin - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Samsung Print Service Plugin published at the 'play' market has multiple vulnerabilities...

0.6AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:21 a.m.11 views

HP Print Service Plugin - Insecure SSL socket, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application HP Print Service Plugin published at the 'play' market has multiple vulnerabilities...

0.6AI score
Exploits0References1Affected Software1
Rows per page
Query Builder