1719 matches found
September 23, 2019—KB4522010 (OS Build 14393.3206)
None None...
CVE-2019-12465
An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajaxrulesuggest.php file where the term parameter is used insecurely in a database query for showing columns of a table, as demonstrated by an ajaxrulesuggest.php?debug=1&term= request...
PT-2019-12810
Name of the Vulnerable Software and Affected Versions LibreNMS version 1.50.1 Description A SQL injection issue was found, identified in the ajax rulesuggest.php file. The term parameter is used insecurely in a database query for showing columns of a table. This can be demonstrated by a request t...
CVE-2019-12465: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajaxrulesuggest.php file where the term parameter is used insecurely in a database query for showing columns of a table, as demonstrated by an ajaxrulesuggest.php?debug=1&term= request...
CloudBees Jenkins CSRF Cross-Site Request Forgery Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
CVE-2019-15507
In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user in certain limited special-characters circumstances could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.7. T...
UBUNTU-CVE-2019-15239
In the Linux kernel, a certain net/ipv4/tcpoutput.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting...
DEBIAN-CVE-2019-15118
checkinputterm in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion...
jenkins: CSRF protection tokens did not expire (SECURITY-626)
A flaw was found in Jenkins in weekly versions prior to 2.186 and LTS versions prior to 2.176.2. By default, CSRF tokens in Jenkins only checked user authentication and IP address which allowed attackers able to obtain a CSRF token for another user. This allowed an attacker to implement CSRF...
USN-4049-3 glib2.0 regression
USN-4049-1 fixed a vulnerability in GLib. The update introduced a regression in Ubuntu 16.04 LTS causing a possibly memory leak. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that GLib created directories and files without properly...
CloudBees Jenkins Cross-Site Request Forgery Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
July 16, 2019—KB4507459 (OS Build 14393.3115)
None None...
CVE-2019-13478
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...
Design/Logic Flaw
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...
CVE-2019-13478
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...
PT-2019-13358 · Yoast · Yoast Seo Plugin
Name of the Vulnerable Software and Affected Versions: Yoast SEO plugin versions prior to 11.6-RC5 Description: The issue concerns the improper restriction of unfiltered HTML in term descriptions, which could lead to potential security risks. Recommendations: For versions prior to 11.6-RC5, updat...
CVE-2019-13478: Improper Neutralization of Input During Web Page Generation
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...
June 27, 2019—KB4509475 (OS Build 14393.3056)
None None...