CVE-2022-36895

CVE-2022-36895 affects Jenkins Compuware Topaz Utilities Plugin (versions 1.0.8 and earlier). The vulnerability is a missing permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs sto...

PT-2022-4042 · Compuware +1 · Jenkins Compuware Topaz Utilities Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Compuware Topaz Utilities Plugin versions 1.0.8 and earlier Description: The issue is related to a missing permission check in the Jenkins Compuware Topaz Utilities Plugin, which can be exploited by attackers with Overall/Read...

Jenkins Compuware Topaz Utilities Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities

SigPlus Pro ActiveX Control is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities

The host is installed with SigPlus Pro ActiveX Control and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsigplusproactivexcontrolmultvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Topaz Systems SigPlus Pro ActiveX Control Multiple Vulnerabilities Authors: Madhuri D...

CVE-2011-0323

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe 1 SetLogFilePath and 2 SigMessage methods to create arbitrary files with arbitrary content...

CVE-2011-0324

Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long 1 KeyString property, 2 NewPath parameter to the SetLocalIniFilePath method, or 3 NewPortPath parameter to t...

Heap overflow

Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long 1 KeyString property, 2 NewPath parameter to the SetLocalIniFilePath method, or 3 NewPortPath parameter to t...

Code injection

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe 1 SetLogFilePath and 2 SigMessage methods to create arbitrary files with arbitrary content...

CVE-2011-0323

The CVE-2011-0323 flaw affects Topaz Systems SigPlus Pro ActiveX Control (versions before 4.29). The vulnerability allows remote code execution by calling unsafe methods SetLogFilePath and SigMessage to create arbitrary files with arbitrary content. Related OpenVAS entries describe multi-vulnerab...

CVE-2011-0324

Affected software: Topaz Systems SigPlus Pro ActiveX Control (versions around 3.95 and possibly before 4.29). Vulnerability: multiple heap-based buffer overflows enabled by long values in (1) KeyString property, (2) SetLocalIniFilePath NewPath parameter, and (3) SetTabletPortPath NewPortPath para...

SigPlus Pro ActiveX Control < 4.29 Multiple Vulnerabilities

The SigPlus Pro ActiveX control, used for electronic signature integration with Topaz signature pads and installed on the remote Windows host, is earlier than 4.29. Such versions reportedly are affected by the following vulnerabilities : - The 'SetLogFilePath' method allows creation of a log file...

SigPlus Pro ActiveX Version Detection

This script finds the installed SigPlus Pro ActiveX version and saves the version in KB. OpenVAS Vulnerability Test $Id: gbsigplusproactivexdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ SigPlus Pro ActiveX Version Detection Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks GmbH,...

SigPlus Pro 3.74 - ActiveX 'LCDWriteString()' Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)

!-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...