org.jenkins-ci.plugins:android-emulator (>=${revision}651.v471170b_2a_734, <=652.v185536c05086) potentially affected by CVE-2019-10350 via org.jenkins-ci.plugins:port-allocator (>=1.8, <=1.10)

org.jenkins-ci.plugins:port-allocator MAVEN version =1.8, =$revision651.v471170b2a734, =652.v185536c05086 Source cves: CVE-2019-10350 Source advisory: GHSA-5HHG-Q22C-6G39...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2017-17383 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2016-3725 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2018-1999042 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2017-1000393 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2017-1000392 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2016-9299 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2018-1000169 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2018-1000408 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2019-1003003 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2018-1000068 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

Micro Star International App Player security vulnerability

Micro Star International App Player is an Android emulator from Micro Star, a Taiwan, China-based company, that allows you to install and play Android games and applications available in the Google Play store directly on your PC. Micro Star International App Player has a security vulnerability th...

Intel HAXM resource management error vulnerability

Intel HAXM Intel Hardware Accelerated Execution Manager is a cross-platform hardware-assisted virtualization engine hypervisor from Intel Corporation that is widely used as a gas pedal for Android Emulator and QEMU. Intel HAXM suffers from a resource management error vulnerability, which arises...

Intel HAXM resource management error vulnerability

Intel HAXM Intel Hardware Accelerated Execution Manager is a cross-platform hardware-assisted virtualization engine hypervisor from Intel Corporation that is widely used as a gas pedal for Android Emulator and QEMU. Intel HAXM suffers from a resource management error vulnerability, which arises...

AndyOS Telnet SSH Privilege Escalation

The vulnerability of Telnet and SSH services in the Android emulator AndyOS is related to authentication flaws. Exploiting this vulnerability can allow a hacker to gain root-level privileges...

Tencent GameLoop security vulnerability

Tencent GameLoop is an Android emulator from Tencent, a Chinese company. It enables players to play Android games on their computers. Tencent GameLoop before 4.1.21.90 suffers from a security vulnerability that originates from a malicious attacker in the MITM position that can be exploited to spo...

A week in security (February 1 – February 7)

Last week on Malwarebytes Labs, we dug into a load of security events. We first peered into how Fonix ransomware was giving up the ghost, swearing off a life of crime and even apologizing for past actions. We looked at a credit card skimmer that found opportunity in the latest Magento 1 hacking...