2203 matches found
CVE-2019-1003085
A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptordoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...
Cross site request forgery (csrf)
A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptordoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...
Input validation
A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptordoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...
CVE-2019-1003084
CVE-2019-1003084 concerns a cross-site request forgery in the Jenkins Zephyr Enterprise Test Management Plugin, specifically in the ZeeDescriptor#doTestConnection form validation. The issue permits an attacker to initiate a connection to an attacker-specified server, representing a CSRF vulnerabi...
CVE-2019-1003085
Summary: CVE-2019-1003085 affects Jenkins Zephyr Enterprise Test Management Plugin. The root cause is a missing permission check in ZeeDescriptor#doTestConnection form validation, allowing attackers with Overall/Read privileges to initiate a connection to an attacker-specified server. Impact is m...
CVE-2019-1003084
A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptordoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...
CVE-2019-1003085
A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptordoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...
CVE-2019-1003084
A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptordoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...
CVE-2019-1003084: Cross-Site Request Forgery (CSRF)
A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptordoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...
PT-2019-11374 · Jenkins · Jenkins Zephyr Enterprise Test Management Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins Zephyr Enterprise Test Management Plugin affected versions not specified Description: A cross-site request forgery issue exists in the ZeeDescriptordoTestConnection form validation method, allowing attackers to initiate a connection t...
PT-2019-11375 · Jenkins · Jenkins Zephyr Enterprise Test Management Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Zephyr Enterprise Test Management Plugin affected versions not specified Description: A missing permission check in the ZeeDescriptordoTestConnection form validation method allows attackers with Overall/Read permission to initiate a...
CVE-2019-1003085: Missing Authorization
A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptordoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...
CSRF vulnerability and missing permission check in zephyr-enterprise-test-management allow SSRF
A missing permission check in a form validation method in zephyr-enterprise-test-management allows users with Overall/Read permission to initiate a connection test to an attacker-specified server with attacker-specified credentials. Additionally, the form validation method does not require POST...
Arm Whois 3.11 - Buffer Overflow (ASLR)
Exploit Title: Arm Whois 3.11 - Buffer Overflow ASLR Google Dork: if applicable Date: 23/11/2018 Exploit Author: zephyr Vendor Homepage: http://www.armcode.com Software Link: http://www.armcode.com/downloads/arm-whois.exe Version: 3.11 Tested on: Windows Vista Ultimate SP1 x86 unpatched CVE : nSE...
CVE-2018-1000800
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sysringbufput, sysringbufget that can result in CPU Page Fault error code 0x00000010. This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs system sysringbufget and...
CVE-2018-1000800
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sysringbufput, sysringbufget that can result in CPU Page Fault error code 0x00000010. This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs system sysringbufget and...
Null pointer dereference
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sysringbufput, sysringbufget that can result in CPU Page Fault error code 0x00000010. This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs system sysringbufget and...
CVE-2018-1000800
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sysringbufput, sysringbufget that can result in CPU Page Fault error code 0x00000010. This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs system sysringbufget and...
CVE-2018-1000800
Zephyr RTOS 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put() and sys_ring_buf_get(), potentially triggering a CPU Page Fault (error code 0x00000010). The issue is exploitable via a malicious application calling the vulnerable kernel APIs (system sys_ring_buf_get()...
PT-2018-9526
Name of the Vulnerable Software and Affected Versions zephyr-rtos version 1.12.0 Description The issue is related to a NULL base pointer reference in the sys ring buf put and sys ring buf get functions, which can cause a CPU Page Fault with error code 0x00000010. This can be exploited through a...