CVE-2018-1000603

Summary (CVE-2018-1000603): Affected product: Jenkins Openstack Cloud Plugin (versions 2.35 and earlier). The vulnerability arises in multiple OpenStack-related classes (e.g., BootSource.java, OpenstackCredentials.java, SlaveOptions.java, etc.) and allows attackers with Overall/Read access to Jen...

PT-2018-9458

Name of the Vulnerable Software and Affected Versions Jenkins Openstack Cloud Plugin versions 2.35 and earlier Description A sensitive information exposure issue exists, allowing attackers with Overall/Read access to Jenkins to connect to a specified URL using attacker-specified credentials IDs...

CVE-2018-1000603: Exposure of Sensitive Information to an Unauthorized Actor

A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, JCloudsSlave.java,...

CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials

Openstack Cloud Plugin did not perform permission checks on methods implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored i...

PT-2015-7822

Name of the Vulnerable Software and Affected Versions Foxit Reader versions 6.1 through 6.2.x Foxit Reader versions 7.x before 7.2.2 Description The issue allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption when an update to th...

Foxit Reader < 7.1 Cloud Plugin Windows Search Path Vulnerability

Foxit Reader Cloud Plugin is prone to a windows search path vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder...

CVE-2015-2789

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder...

KLA10517 Privilege escalation in Foxit Reader

Search path vulnerability was found in Foxit Reader Cloud plugin. By exploiting this vulnerability malicious users gain privileges. This vulnerability can be exploited locally via files manipulation. Original advisories Foxit bulletins Exploitation Public exploits exist for this vulnerability...

PT-2015-5896

Name of the Vulnerable Software and Affected Versions Foxit Reader versions 6.1 through 7.0.6.1126 Description The issue is related to an unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service within the Cloud plugin. This allows local users to potentially gain privileg...

WordPress SCORM Cloud Plugin <= 1.0.6.6 - SQL Injection

Sermon Browser plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...