Lucene search
+L

6435 matches found

vulnersOsv
vulnersOsv
•added 2022/05/14 1:04 a.m.•1 views

jp.shiftinc.jenkins.plugins:discard-old-build (>=1.04, <=1.05), org.jenkins-ci.main:jenkins-test-harness (1.515) +6 more potentially affected by CVE-2017-1000394 via org.jenkins-ci.main:jenkins-core (1.515)

org.jenkins-ci.main:jenkins-core MAVEN version 1.515 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jp.shiftinc.jenkins.plugins:discard-old-build =1.04, =1.05 -...

7.5CVSS0.01146EPSS
SaveExploits0
RubySec
RubySec
•added 2022/05/14 12:00 a.m.•183 views

WEBrick RCE Vulnerability

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name...

9.3CVSS8AI score0.16412EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2022/05/13 12:15 p.m.•19 views

CVE-2021-42969

Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a new file and write something in usercustomize.py. When the user opens the terminal or activates Anaconda, the command will be executed...

8.8CVSS5.8AI score0.01909EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/05/13 11:39 a.m.•45 views

CVE-2021-42969

Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a new file and write something in usercustomize.py. When the user opens the terminal or activates Anaconda, the command will be executed...

9.2AI score0.01909EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
•added 2022/05/13 1:50 a.m.•0 views

jp.shiftinc.jenkins.plugins:discard-old-build (>=1.04, <=1.05), org.jenkins-ci.main:jenkins-test-harness (1.515) +6 more potentially affected by CVE-2018-1999043 via org.jenkins-ci.main:jenkins-core (1.515)

org.jenkins-ci.main:jenkins-core MAVEN version 1.515 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jp.shiftinc.jenkins.plugins:discard-old-build =1.04, =1.05 -...

7.5CVSS0.01673EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2022/05/13 1:38 a.m.•31 views

GHSA-7GCP-2GMQ-W3XH RubyGems Code Injection vulnerability

RubyGems prior to 2.6.13 is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences...

9.8CVSS8.5AI score0.11102EPSS
SaveExploits1References15
Github Security Blog
Github Security Blog
•added 2022/05/13 1:38 a.m.•39 views

RubyGems Code Injection vulnerability

RubyGems prior to 2.6.13 is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences...

9.8CVSS3.8AI score0.11102EPSS
SaveExploits1References15Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/13 1:07 a.m.•45 views

Fluentd Escape Sequence Injection Vulnerability

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors...

10CVSS6.8AI score0.04581EPSS
SaveExploits0References7Affected Software1
vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•1 views

jp.shiftinc.jenkins.plugins:discard-old-build (>=1.04, <=1.05), org.jenkins-ci.main:jenkins-test-harness (1.515) +6 more potentially affected by CVE-2018-1999005 via org.jenkins-ci.main:jenkins-core (1.515)

org.jenkins-ci.main:jenkins-core MAVEN version 1.515 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jp.shiftinc.jenkins.plugins:discard-old-build =1.04, =1.05 -...

5.4CVSS0.00894EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•1 views

jp.shiftinc.jenkins.plugins:discard-old-build (>=1.04, <=1.05), org.jenkins-ci.main:jenkins-test-harness (1.515) +6 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.515)

org.jenkins-ci.main:jenkins-core MAVEN version 1.515 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jp.shiftinc.jenkins.plugins:discard-old-build =1.04, =1.05 -...

8.8CVSS0.18116EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/05/13 1:00 a.m.•1 views

jp.shiftinc.jenkins.plugins:discard-old-build (>=1.04, <=1.05), org.jenkins-ci.main:jenkins-test-harness (1.515) +6 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.515)

org.jenkins-ci.main:jenkins-core MAVEN version 1.515 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jp.shiftinc.jenkins.plugins:discard-old-build =1.04, =1.05 -...

4.3CVSS0.00759EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/13 12:00 a.m.•7 views

CVE-2021-42969: Improper Neutralization of Special Elements used in an OS Command

Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a new file and write something in usercustomize.py. When the user opens the terminal or activates Anaconda, the command will be executed...

9.3CVSS7.9AI score0.01909EPSS
SaveExploits1References2
RubySec
RubySec
•added 2022/05/13 12:00 a.m.•37 views

Fluentd Escape Sequence Injection Vulnerability

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors...

10CVSS6.8AI score0.04581EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2022/05/12 12:00 a.m.•20 views

Command Execution Vulnerability in JingYun Terminal Security Management System of Beijing Centron Link Information Technology Co.

Ltd. was established in July 2016, by Beijing Qixingchen Information Security Technology Co., Ltd., Beijing Beixinyuan Software Co., Ltd., Beijing Zhengyong Information Technology Co. Beijing Centron Lead Information Technology Co., Ltd. Jing cloud terminal security management system there is a...

1.8AI score
SaveExploits0
osv_oesa
osv_oesa
•added 2022/05/11 11:04 a.m.•19 views

OESA-2022-1648 vte security update

VTE is a terminal emulator widget for use with GTK+ 2.0. Security Fixes: The VteTerminal in gnome-terminal vte before 0.32.2 allows remote authenticated users to cause a denial of service long loop and CPU consumption via an escape sequence with a large repeat count value.CVE-2012-2738...

6.5CVSS6.7AI score0.11241EPSS
SaveExploits2References2
CNVD
CNVD
•added 2022/05/11 12:00 a.m.•32 views

Arbitrary File Download Vulnerability in Centron View Cloud Terminal Security Management System

CentronView Terminal Security Management System is an enterprise-level network anti-virus system developed by Beijing CentronView Information Technology Co. There is an arbitrary file download vulnerability in CentronView Cloud Terminal Security Management System, which can be exploited by...

3.3AI score
SaveExploits0
CNVD
CNVD
•added 2022/05/11 12:00 a.m.•15 views

SQL Injection Vulnerability in Centron View Cloud Terminal Security Management System

Centrin JingYun Terminal Security Management System is an enterprise-level network anti-virus system developed by Beijing Centrin Link Information Technology Co. There is a SQL injection vulnerability in CentronView Cloud Terminal Security Management System, which can be exploited by attackers to...

2.5AI score
SaveExploits0
CNVD
CNVD
•added 2022/05/11 12:00 a.m.•21 views

Logic flaw vulnerability in the security management system of Centron View cloud terminal

CentronView Terminal Security Management System is an enterprise-level network anti-virus system developed by Beijing CentronView Information Technology Co. There is a logic flaw vulnerability in the Centron View Cloud Terminal Security Management System, which can be exploited by attackers to...

2.5AI score
SaveExploits0
osv_alba
osv_alba
•added 2022/05/10 2:59 p.m.•32 views

ALBA-2022:2139 tlog bug fix and enhancement update

Tlog is a terminal I/O recording program similar to "script", but used in place of a user's shell, starting the recording and executing the real user's shell afterwards. The recorded I/O can then be forwarded to a logging server in JSON format. Bug Fixes and Enhancements: tlog causing SSH to not...

7.2AI score
SaveExploits0References1
AlmaLinux
AlmaLinux
•added 2022/05/10 2:59 p.m.•29 views

tlog bug fix and enhancement update

Tlog is a terminal I/O recording program similar to "script", but used in place of a user's shell, starting the recording and executing the real user's shell afterwards. The recorded I/O can then be forwarded to a logging server in JSON format. Bug Fixes and Enhancements: tlog causing SSH to not...

7AI score
SaveExploits0References1
Rows per page
Query Builder