1769 matches found
Jenkins docker-build-step Plugin Security Vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
PT-2024-19247 · Jenkins · Jenkins Docker-Build-Step Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins docker-build-step Plugin versions 2.11 and earlier Description: A missing permission check in an HTTP endpoint allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL, and to reconfigur...
PT-2024-19236 · Jenkins · Jenkins Docker-Build-Step Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins docker-build-step Plugin versions 2.11 and earlier Description: A cross-site request forgery issue allows attackers to connect to a specified TCP or Unix socket URL and reconfigure the plugin, affecting future build step executions...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: kubeflow, thanos, local-path-provisioner, php-fpmexporter, cilium-cli, crossplane-provider-azure-sql, crossplane-provider-azure-authorization, flux-notification-controller, metallb, wavefront-collector-for-kubernetes, nats, nri-kubernetes, argo-workflows, helm-push,...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: kube-bench, amass, trillian, temporal-server, k3s, caddy, spicedb, src, step-ca, ferretdb, kots, kine, argo-workflows, step...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: kube-bench-fips, trillian-fips, kots, temporal-server-fips, step, caddy, caddy-fips, falcosidekick-fips, trillian, temporal-server, wavefront-collector-for-kubernetes, k3s, amass, argo-workflows, kine, argo-workflows-fips, kube-bench, step-ca, src, ferretdb, spicedb...
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: kube-bench-fips, trillian-fips, kots, temporal-server-fips, step, caddy, caddy-fips, falcosidekick-fips, trillian, temporal-server, wavefront-collector-for-kubernetes, k3s, amass, argo-workflows, kine, argo-workflows-fips, kube-bench, step-ca, src, ferretdb, spicedb...
GHSA-M7WR-2XF7-CM9P vulnerabilities
Vulnerabilities for packages: step, caddy, caddy-fips, argo-workflows, trillian-fips, argo-workflows-fips, trillian, kots, step-ca, wavefront-collector-for-kubernetes...
SUSE CVE-2021-47006
In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hwbreakpoint: Do not directly check the event's overflowhandler hook The commit 1879445dfa7b "perf/core: Set event's default ::overflowhandler" set a default event-overflowhandler in perfeventalloc, and replace the...
UBUNTU-CVE-2021-47006
In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hwbreakpoint: Do not directly check the event's overflowhandler hook The commit 1879445dfa7b "perf/core: Set event's default ::overflowhandler" set a default event-overflowhandler in perfeventalloc, and replace the...
CVE-2021-46957
In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: fix kernel panic when invoking sysread traced by kprobe The execution of sysread end up hitting a BUGON in findgetblock after installing kprobe at sysread, the BUG message like the following: 65.708663 ------------...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: fix kernel panic when invoking sysread traced by kprobe The execution of sysread end up hitting a BUGON in findgetblock after installing kprobe at sysread, the BUG message like the following: 65.708663 ------------...
CVE-2021-46957 riscv/kprobe: fix kernel panic when invoking sys_read traced by kprobe
In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: fix kernel panic when invoking sysread traced by kprobe The execution of sysread end up hitting a BUGON in findgetblock after installing kprobe at sysread, the BUG message like the following: 65.708663 ------------...
CVE-2024-23137
A maliciously crafted STP or SLDPRT file, when parsed in ODXSWDLL.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...
CVE-2024-23132
A maliciously crafted STP file in atfdwgconsumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...
CVE-2024-23131
A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to...
CVE-2024-23133
A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...
CVE-2024-23120 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the...
