Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

CVE-2022-34818

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34818

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34818

The CVE-2022-34818 entry concerns Jenkins Failed Job Deactivator Plugin (versions

CVE-2022-34817

CVE-2022-34817 describes a CSRF vulnerability in the Jenkins Failed Job Deactivator Plugin, affecting version 1.2.1 and earlier. The vulnerability allows an attacker to disable jobs in Jenkins via a crafted request. The issue is noted across multiple sources (NVD entry for CVE-2022-34817 and PT S...

CVE-2022-34817

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

PT-2022-22370 · Jenkins · Jenkins Failed Job Deactivator Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Failed Job Deactivator Plugin versions 1.2.1 and earlier Description: The issue concerns a lack of permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs. Additionally, t...

PT-2022-22369 · Jenkins · Jenkins Failed Job Deactivator Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Failed Job Deactivator Plugin versions 1.2.1 and earlier Jenkins versions 2.286 and earlier Jenkins LTS versions 2.277.1 and earlier Description: A cross-site request forgery CSRF issue allows attackers to disable jobs. This issue is...

CVE-2022-34817: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

Jenkins Plugin Failed Job Deactivator 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.JenJenkins Failed Job Deactivator Plugin...

Jenkins Plugin Failed Job Deactivator 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Failed Job Deactivator Plugin...

CVE-2022-34818: Missing Authorization

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

GSD-2022-1003422 cifs: fix potential double free during failed mount

cifs: fix potential double free during failed mount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1002969 ubi: ubi_create_volume: Fix use-after-free when volume creation failed

ubi: ubicreatevolume: Fix use-after-free when volume creation failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

PT-2022-31685

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential double free issue during a failed mount has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

MAL-2022-4110 Malicious code in karma-failed-tests-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936e6328b59bb0287da11b8311dd6a223d84756be95bf201c9e3b87d6c056eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-failed-tests-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936e6328b59bb0287da11b8311dd6a223d84756be95bf201c9e3b87d6c056eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

_harvest rewards can be stolen because it doesn't implement any slippage bounds

Lines of code Vulnerability details Impact Harvested funds stolen Proof of Concept harvest does not implement any kind of minimum out when calling the 3 consecutive swaps L249, L263 and L275 to get from auraBal to Aura. An attacker could easily sandwich the least liquid pool and steal all the...

LinkedIn: The software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more su

example- String username = request.getParameter"username"; String password = request.getParameter"password"; int authResult = authenticateUserusername, password; the security tokens can be bypassed easily , they are dont make user account safe . //script - check attached file Impact Technical...

External contract calls inside loops may result in DoS.

Lines of code Vulnerability details Impact Calls to external contracts inside a loop are dangerous especially if the loop index can be user-controlled because it could lead to DoS if one of the calls reverts or execution runs out of gas. Reference Proof of Concept for uint i = 0; i 0...