3423 matches found
Jenkins Support Core Plugin stores sensitive data in plain text
Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle. Support Core Plugin 2.79.1 adds a list of keywords whose associated values are redacted...
Design/Logic Flaw
Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle...
CVE-2022-25187
Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle...
CVE-2022-25187: Improper Removal of Sensitive Information Before Storage or Transfer
Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle...
org.apache.camel:camel-example-cxf (>=2.10.5, <=2.10.6), org.apache.cxf.systests:cxf-systests-jaxrs (2.6.8) +15 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.6.8)
org.apache.cxf:cxf-rt-management MAVEN version 2.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.camel:camel-example-cxf =2.10.5, =2.10.6 - org.apache.cxf.systests:cxf-systests-jaxr...
org.apache.cxf.systests:cxf-systests-jaxrs (2.6.5), org.apache.cxf.systests:cxf-systests-jaxws (2.6.5) +11 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.6.5)
org.apache.cxf:cxf-rt-management MAVEN version 2.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.6.5 - org.apache.cxf.systests:cxf-systests-jaxws...
Design/Logic Flaw
OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree AST that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted are those that parse and compare web paths...
openSUSE: Security Advisory for nextcloud (openSUSE-SU-2021:1602-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2022-6577 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing...
Cross-site Scripting in Netgen Tags Bundle
Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface...
GHSA-XVVV-WJ7J-R9JM Cross-site Scripting in Netgen Tags Bundle
Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface...
Exploit for Out-of-bounds Write in Apple Macos
CVE-2021-30853 A simple POC script to test for CVE-2021-30657...
CVE-2021-45895
Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface...
CVE-2021-45895
Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface...
CVE-2021-45895
Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface...
Cross site scripting
Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface...
CVE-2021-45895
Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface...
CVE-2021-45895
Netgen Tags Bundle vulnerability CVE-2021-45895 affects Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15, where the Tags Admin interface is susceptible to cross-site scripting (XSS). ROOT CAUSE: improper escaping in the Tags Admin UI leads to injected JavaScript execution. IMPACT: X...
CVE-2021-45895
Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface...
CVE-2021-45895: Improper Neutralization of Input During Web Page Generation
Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface...