17103 matches found
CVE-2020-2124
CVE-2020-2124 affects Jenkins Dynamic Extended Choice Parameter Plugin (versions ≤ 1.0.1). The vulnerability: passwords are stored unencrypted in job config.xml files on the Jenkins master, allowing access by users with Extended Read permission or master FS access. Impact is exposure of stored cr...
PT-2020-15331 · Jenkins · Jenkins Dynamic Extended Choice Parameter Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Dynamic Extended Choice Parameter Plugin versions 1.0.1 and earlier Description: The issue concerns the storage of passwords in an unencrypted manner in job config.xml files on the Jenkins master. This allows users with Extended Read...
Foxit PDF Editor DLL Hijacking Vulnerability
Foxit PDF Editor is a PDF file editing software. Foxit PDF Editor has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...
Extreme PDF Editor DLL Hijacking Vulnerability
Extreme PDF Editor a PDF editor. Extreme PDF Editor has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...
Foxit PDF Compression Master DLL Hijacking Vulnerability
Foxit PDF Compression Master is a document compression software. Foxit PDF Compressor has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...
Password stored in plain text by dynamic_extended_choice_parameter
dynamicextendedchoiceparameter 1.0.1 and earlier stores a Subversion password unencrypted in job config.xml files as part of its configuration. This credential can be viewed by users with Extended Read permission or access to the Jenkins controller file system. As of publication of this advisory,...
Extreme PDF to WORD software suffers from DLL hijacking vulnerability
Extreme PDF to WORD is a PDF to Word converter. Extreme PDF to WORD software has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...
Extreme PDF Reader suffers from DLL hijacking vulnerability
Extreme PDF Reader is a PDF reader. Extreme PDF Reader has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...
CVE-2020-5821
Symantec Endpoint Protection SEP and Symantec Endpoint Protection Small Business Edition SEP SBE, prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a DLL injection vulnerability, which is a type of issue whereby an individual attempts to execute their own code ...
The vulnerability of the handlers/views_handler_filter_dynamic_fields.inc component in the Drupal Views Dynamic Fields module allows a hacker to execute arbitrary code.
The vulnerability of the handlers/viewshandlerfilterdynamicfields.inc component in the Drupal “Views Dynamic Fields” module is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon (JDHCPD) in the operating system allows a attacker to execute arbitrary commands with root privileges.
The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon JDHCPD operating system exists due to the lack of measures taken to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands wi...
The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon (JDHCPD) in the operating system allows a attacker to execute arbitrary commands with root privileges.
The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon JDHCPD operating system exists due to the lack of measures taken to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands wi...
The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon (JDHCPD) in the operating system allows a attacker to execute arbitrary commands with root privileges.
The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon JDHCPD operating system is related to the failure to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root...
The vulnerability of the vrend_blit_need_swizzle function (vrend_renderer.c) in the virglrenderer library, which allows a hacker to trigger a service failure.
The vulnerability of the vrendblitneedswizzle function in the virglrenderer library is related to reading beyond the buffer boundary in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure using the VIRGLCCMDBLIT command...
GitHub Security Lab: Dynamic reflection class
This bug was reported directly to GitHub Security Lab...
SUSE SLES12 Security Update : xen (SUSE-SU-2020:0334-1)
This update for xen fixes the following issues : CVE-2020-7211: potential directory traversal using relative paths via tftp server on Windows host bsc1161181. CVE-2019-19579: Device quarantine for alternate pci assignment methods bsc1157888. CVE-2019-19581: findnextbit issues bsc1158003...
openSUSE wicked denial of service vulnerability
openSUSE is an operating system based on the linux kernel. A denial of service vulnerability exists in openSUSE, which can be exploited by an attacker to cause a denial of service by sending specially crafted DHCP4 packets...
CVE-2019-20406
The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a DLL file in a directory in the global path environmental variable variable to inject code &...
CVE-2019-20400
The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directory in the global path environmental variable can inject code into via a DLL hijacking vulnerability...
