CVE-2010-5190

The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities...

CVE-2017-1000106

Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. Its SCM content REST API supports the pipeline creation and editing feature in Blue...

CVE-2024-9544

creationtimestamp| type| source ---|---|--- 2025-05-22 09:42:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17261 2025-05-22 11:20:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpqypfkblv2m...

CVE-2017-1000110

Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. It did not properly check the current user's authentication and authorization when...

CVE-2017-1000105

The optional Run/Artifacts permission can be enabled by setting a Java system property. Blue Ocean did not check this permission before providing access to archived artifacts, Item/Read permission was sufficient...

CVE-2010-5191

Multiple cross-site request forgery CSRF vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijack the authentication of administrators for requests that 1 change a password, 2 modify a policy, or 3 restart the device...

CVE-2018-25088

A vulnerability, which was classified as critical, was found in Blue Yonder postgraasserver up to 2.0.0b2. Affected is the function createpgconnection/createpostgresdb of the file postgraasserver/backends/postgrescluster/postgresclusterdriver.py of the component PostgreSQL Backend Handler. The...

CVE-2015-8482

Blue Coat Unified Agent before 4.6.2 does not prevent modification of its configuration files when running in local enforcement mode, which allows local administrators to unblock categories or disable the agent via unspecified vectors...

CVE-2015-1454

Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not properly validate certain certificates, which allows man-in-the-middle attackers to spoof ProxySG Client Managers, and consequently modify configurations and execute arbitrary software...

CVE-2010-5189

Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session...

CVE-2011-5127

Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request...

CVE-2011-5125

Cross-site scripting XSS vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method...

CVE-2011-5124

Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port 16102/tcp...

CVE-2011-5126

Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allows context-dependent attackers to obtain sensitive authentication information by leveraging read access to a downloaded core file...

CVE-2009-1211

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...

CVE-2025-48204

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anh5bx2k 2025-05-21 20:41:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17200...

CVE-2025-43714

creationtimestamp| type| source ---|---|--- 2025-05-20 15:15:56+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lpmewtbelr2l...

CVE-2025-4945

creationtimestamp| type| source ---|---|--- 2025-05-19 17:39:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16900 2025-09-05 23:10:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ly4rs4jqps23 2025-09-05 23:53:08+00:00| seen|...

CVE-2025-23986

creationtimestamp| type| source ---|---|--- 2025-05-19 16:39:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16873 2025-05-19 17:13:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zaqubg2l...

CVE-2025-4923

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16819 2025-05-19 09:13:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpja7zexq52t...