CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

CVE-2019-16563: Improper Neutralization of Input During Web Page Generation

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

CVE-2019-15137

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings instead of the permission expressions themselves, which can lead to unintended connections between participants in a Data Distribution Service DDS network...

CVE-2019-15136

The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service DDS partition...

CVE-2019-15137

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings instead of the permission expressions themselves, which can lead to unintended connections between participants in a Data Distribution Service DDS network...

CVE-2019-15137

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings instead of the permission expressions themselves, which can lead to unintended connections between participants in a Data Distribution Service DDS network...

CVE-2019-15136

The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service DDS partition...

PT-2019-14008

Name of the Vulnerable Software and Affected Versions eProsima Fast RTPS versions prior to 1.9.1 Description The issue concerns the Access Control plugin in eProsima Fast RTPS, where fnmatch pattern matches are performed with topic name strings instead of permission expressions. This can result i...

PT-2019-14007

Name of the Vulnerable Software and Affected Versions eProsima Fast RTPS versions prior to 1.9.1 Description The issue concerns the Access Control plugin in eProsima Fast RTPS, which fails to check partition permissions from remote participant connections. This can result in a policy bypass for a...

The vulnerability of the SCM plugin for distribution of package builds in the mock operating system Fedora allows a hacker to gain superuser privileges.

The vulnerability of the SCM-plugin in the distribution of package-building tools for the mock operating system Fedora is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass the root protection mechanisms and gain superuser privileges by usi...

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

UBUNTU-CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

PT-2017-3517

Name of the Vulnerable Software and Affected Versions Cisco WebEx Extension versions prior to 1.0.7 ActiveTouch General Plugin Container versions prior to 106 GpcContainer Class ActiveX control plugin versions prior to 10031.6.2017.0126 Download Manager ActiveX control plugin versions prior to...

WordPress Woo Email Control Plugin <= 1.01 - Multiple Vulnerabilities

This plugin is prone to a reflected cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

CVE-2014-5368

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

Fedora Update for xfce4-mixer FEDORA-2007-4385

Check for the Version of xfce4-mixer OpenVAS Vulnerability Test Fedora Update for xfce4-mixer FEDORA-2007-4385 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for xfce4-mixer FEDORA-2007-4368

Check for the Version of xfce4-mixer OpenVAS Vulnerability Test Fedora Update for xfce4-mixer FEDORA-2007-4368 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...