Lucene search
K

24 matches found

OSV
OSV
added 2 days ago1 views

SUSE-SU-2026:2265-1 Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes: This is a codestream only update...

9.8CVSS7.1AI score0.00398EPSS
Exploits2References17
OSV
OSV
added 2026/03/25 10:21 a.m.1 views

SUSE-SU-2026:1035-1 Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes: This is a codestream only update...

9.8CVSS6.8AI score0.00313EPSS
Exploits4References60
Packet Storm News
Packet Storm News
added 2026/03/05 12:0 a.m.2 views

Adobe SDK 1.7.1 2410 Robust DNG File Generator / Stress Tester

This Python script generates a structurally valid DNG Digital Negative file containing an embedded JPEG XL JXL codestream...

5.9AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/07 9:49 a.m.5 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

6.5CVSS6.7AI score0.00047EPSS
Exploits0References1
OSV
OSV
added 2023/08/02 7:16 a.m.6 views

SUSE-SU-2023:3136-1 Maintenance update for SUSE Manager 4.3.7 Release Notes

Maintenance update for SUSE Manager 4.3.7 Release Notes: This is a codestream only update...

9.8CVSS7.9AI score0.01879EPSS
Exploits1References45
SUSE CVE
SUSE CVE
added 2023/02/15 4:30 a.m.1 views

SUSE CVE-2018-7175

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components...

5.5CVSS6.8AI score0.00177EPSS
Exploits0References4
CNVD
CNVD
added 2022/03/17 12:0 a.m.22 views

Jenkins Vmware vRealize CodeStream Plugin信息泄露漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Vmware vRealize CodeStream Plugin...

6.5CVSS1.4AI score0.00047EPSS
Exploits0References1
OSV
OSV
added 2022/03/16 12:0 a.m.15 views

GHSA-9WVR-X83M-84V4 Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS6.6AI score0.00047EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/03/16 12:0 a.m.20 views

Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

6.5CVSS3.3AI score0.00047EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2022/03/15 5:15 p.m.9 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

6.5CVSS0.00047EPSS
Exploits0References2
Prion
Prion
added 2022/03/15 5:15 p.m.7 views

Design/Logic Flaw

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4CVSS6.3AI score0.00047EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/03/15 4:46 p.m.13 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

7.2AI score0.00047EPSS
Exploits0References2
CVE
CVE
added 2022/03/15 4:46 p.m.167 views

CVE-2022-27217

CVE-2022-27217 affects Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier. The vulnerability is an information disclosure where passwords are stored unencrypted in job config.xml on the Jenkins controller and can be viewed by users with Extended Read permission or with access to the contro...

6.5CVSS6.6AI score0.00047EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.2 views

Jenkins Vmware vRealize CodeStream 插件安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Vmware vRealize CodeStream Plugin...

6.5CVSS5.7AI score0.00047EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/03/15 12:0 a.m.4 views

PT-2022-18305 · Vmware +1 · Vmware Vrealize Codestream Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Vmware vRealize CodeStream Plugin versions 1.2 and earlier Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins controller. Users with Extended Read permission or access to the Jenkin...

6.5CVSS6.3AI score0.00047EPSS
Exploits0References6
OSV
OSV
added 2020/09/24 12:0 a.m.3 views

OSV-2020-1830 Heap-use-after-free in grk::TileProcessor::~TileProcessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25873 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::TileProcessor grk::CodeStream::decompresstiles grk::CodeStream::dodecompress...

7.2AI score
Exploits0
OSV
OSV
added 2018/02/15 9:29 p.m.1 views

DEBIAN-CVE-2018-7175

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components...

5.5CVSS6.8AI score0.00177EPSS
Exploits0References1
OSV
OSV
added 2018/02/15 9:29 p.m.2 views

UBUNTU-CVE-2018-7175

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components...

5.5CVSS6AI score0.00177EPSS
Exploits0References3
seebug.org
seebug.org
added 2017/09/13 12:0 a.m.41 views

Kakadu SDK JPEG 2000 Contiguous Codestream Code Execution Vulnerability(CVE-2017-2812)

Summary A code execution vulnerability exists in the kdubufferedexpand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise. Tested Versions Kakadu SDK 7.9 - OSX & Linux Produ...

8AI score0.00388EPSS
Exploits1
Talos
Talos
added 2017/08/04 12:0 a.m.49 views

Kakadu SDK JPEG 2000 Contiguous Codestream Code Execution Vulnerability

Summary A code execution vulnerability exists in the kdubufferedexpand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise. Tested Versions Kakadu SDK 7.9 - OSX & Linux Produ...

8.8CVSS8.2AI score0.00388EPSS
Exploits1
Rows per page
Query Builder