CloudBees Jenkins Subversion Plugin Information Disclosure Vulnerability

CloudBees Jenkins Subversion Plugin is a U.S. CloudBees company based on Java development of continuous integration tools in the version control system plugin . A security vulnerability exists in the SubversionStatus.java and SubversionRepositoryStatus.java files in CloudBees Jenkins Subversion...

Information Disclosure Through Authorization Bypass

Jenkins Subversion Plugin is vulnerable to information disclosure through authorization bypass. The vulnerability allows users without Overall/Read permission to submit search queries to retrieve a list of user names and node names...

CVE-2018-1000111

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...

CVE-2018-1000111

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...

Authorization

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...

CVE-2018-1000111

CVE-2018-1000111 affects the Jenkins Subversion Plugin (versions 2.10.2 and earlier). The root cause is improper authorization in SubversionStatus.java and SubversionRepositoryStatus.java, enabling an attacker with network access to obtain a list of nodes and users. The vulnerability enables info...

CVE-2018-1000111

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...

Debian: Security Advisory (DLA-1052-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the component of libsvn_fs_fs/fs_fs.c of the Subversion version control system allows a attacker to disclose protected information or cause service failures.

The vulnerability in the libsvnfsfs/fsfs.c component of the Subversion version control system exists due to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to damaged repositories of FSFS FileSystem atop the FileSystem or caus...

Critical Photon OS Security Update - PHSA-2017-0093

Updates of 'libvirt', 'linux', 'subversion', 'ncurses', 'apr', 'linux-esx', 'krb5' packages of Photon OS have been released...

CVE-2017-9758

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

CVE-2017-9758

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

Session fixation

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

CVE-2017-9758

CVE-2017-9758 affects Savitech USB audio driver packages for Windows. Some driver installers silently install a root CA certificate (SaviAudio) into the Windows Trusted Root Certification Authorities store, creating a trust-anchor that can be abused for man-in-the-middle attacks. Impact reported ...

Apache Subversion DoS Vulnerability (Nov 2017)

Apache Subversion is prone to a denial of service DoS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Medium: golang

Issue Overview: Arbitrary code execution during go get or go get -d: Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points ...

Apache Subversion 'libsvn_fs_fs/fs_fs.c' Denial of Service Vulnerability

Subversion is an open source multi-user version control system that supports non-ASCII text and binary data. A denial-of-service vulnerability exists in the libsvnfsfs/fsfs.c file in version 1.8.x of Apache Subversion prior to 1.8.2, which can be exploited by an authenticated, remote attacker to...

CVE-2013-4246

libsvnfsfs/fsfs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties...

CVE-2013-4246

libsvnfsfs/fsfs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties...

CVE-2013-4246

CVE-2013-4246 affects Apache Subversion 1.8.x prior to 1.8.2. The vulnerability resides in libsvn_fs_fs/fs_fs.c, which could allow remote authenticated users with commit access to corrupt FSFS repositories and trigger a denial of service or disclose sensitive information by editing packed revisio...