4449 matches found
CVE-2023-6149
Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...
CVE-2023-6147
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...
CVE-2023-6148
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...
CVE-2023-6147 Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...
CVE-2023-6147
The Connected documents corroborate CVE-2023-6147 affecting the Qualys Jenkins Plugin for Policy Compliance (versions up to 1.0.5). The root cause is a missing permission check during a connectivity test to Qualys Cloud Services, which allowed any user with login and job-configuration access to p...
CVE-2023-6147
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...
CVE-2023-6147 Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...
PT-2024-14889 · Qualys · Qualys Jenkins Plugin For Policy Compliance
Name of the Vulnerable Software and Affected Versions: Qualys Jenkins Plugin for Policy Compliance versions prior to and including 1.0.5 Description: The issue is related to a missing permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login...
PT-2024-1590
Name of the Vulnerable Software and Affected Versions Qualys Jenkins Plugin for Policy Compliance versions prior to 1.0.6 Description The issue is related to the Qualys Policy Compliance Connector Plugin and involves incorrect restriction of XML links to external objects, allowing a remote attack...
CVE-2023-6148: Improper Neutralization of Input During Web Page Generation
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...
CVE-2023-6149: Improper Restriction of XML External Entity Reference
Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize t...
CVE-2023-6147: Improper Restriction of XML External Entity Reference
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...
NewStart CGSL MAIN 6.06 : dhcp Vulnerability (NS-SA-2023-0091)
The remote NewStart CGSL host, running version MAIN 6.06, has dhcp packages installed that are affected by a vulnerability: - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series are...
Kepware KEPServerEX ThingWorx Industrial Connectivity OPC-Aggregator Rockwell Automation KEPServer Enterprise
The vulnerabilities of the Kepware KEPServerEX, ThingWorx Industrial Connectivity, OPC-Aggregator, Rockwell Automation KEPServer Enterprise, and GE Digital Industrial Gateway Server software-related programs are related to the use of memory after it is freed. Exploiting these vulnerabilities can...
Kepware KEPServerEX ThingWorx Industrial Connectivity OPC-Aggregator Rockwell Automation KEPServer Enterprise
The vulnerabilities of the Kepware KEPServerEX, ThingWorx Industrial Connectivity, OPC-Aggregator, Rockwell Automation KEPServer Enterprise, and GE Digital Industrial Gateway Server software-related programs are related to the execution of operations outside the buffer in memory. Exploiting these...
Buffer Overflow Vulnerability in Some Huawei Products (huawei-sa-20161116-01-cfm)
There is a buffer overflow vulnerability in Connectivity Fault Management CFM function of some Huawei Products. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2022-41677
An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...
PT-2023-8587
Name of the Vulnerable Software and Affected Versions Hardy Barth cPH2 eCharge Ladestation versions 1.87.0 and earlier Description The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This may allow a remote attacker to execute arbitrar...
