7540 matches found
PT-2019-11378 · Jenkins · Jenkins Fabric Beta Publisher Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Fabric Beta Publisher Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master. This allows users with Extended Read...
PT-2019-11344 · Jenkins · Jenkins Jira Issue Updater Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins Jira Issue Updater Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master or controller. These credentials can be...
PT-2019-11697 · Jenkins +1 · Jenkins Crittercism-Dsym Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins crittercism-dsym Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master or controller. These credentials can be...
PT-2019-11386 · Jenkins · Jenkins Testfairy Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins TestFairy Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master. This allows users with Extended Read permission or...
PT-2019-11679 · Jenkins · Jenkins Starteam Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins StarTeam Plugin affected versions not specified Description: The issue allows credentials to be stored unencrypted in job config.xml files on the Jenkins master. Users with Extended Read permission or access to the master file system...
PT-2019-11686 · Jenkins · Jenkins Diawi Upload Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins Diawi Upload Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master or controller. These credentials can be accessed...
PT-2019-11363 · Jenkins · Jenkins Vs Team Services Continuous Deployment Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins VS Team Services Continuous Deployment Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master or controller. These...
PT-2019-11685 · Jenkins · Jenkins Mabl Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins mabl Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master or controller. These credentials can be accessed by user...
[SECURITY] Fedora 30 Update: ntfs-3g-2017.3.23-11.fc30
NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...
Mozilla: Use-after-free with SMIL animation controller
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...
Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time JIT compiler and when the constructor function is entered through on-stack replacement OSR. This allows for possible arbitrary...
Mozilla: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
The IonMonkey just-in-time JIT compiler can leak an internal JSOPTIMIZEDOUT magic value to the running script during a bailout. This magic value can then be used by JavaScript to achieve memory corruption, which results in a potentially exploitable crash. This vulnerability affects Thunderbird...
Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This...
Mail.ru: CSRF on /subscription_manage.php endpoint at allods.mail.ru
CSRF in https://allods.mail.ru allows to manage user's subscriptions. allods.mail.ru belongs to extended scope...
PT-2019-11335 · Jenkins · Jenkins Ecs Publisher Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins ECS Publisher Plugin versions 1.0.0 and earlier Description: A vulnerability in the plugin allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configur...
Cisco ASR 900 Cisco IOS XE Input Validation Vulnerability
The Cisco ASR 900 is a 900-series aggregation services router from Cisco, Inc.Cisco IOS XE is an operating system developed for Cisco network devices. An input validation vulnerability exists in Cisco IOS XE in the Cisco ASR 900 Route Switch Processor 3 that stems from the program's failure to...
LAPSToolkit - Tool To Audit And Attack LAPS Environments
Functions written in PowerShell that leverage PowerView to audit and attack Active Directory environments that have deployed Microsoft's Local Administrator Password Solution LAPS. It includes finding groups specifically delegated by sysadmins, finding users with "All Extended Rights" that can vi...
CVE-2019-10022
An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc...