6819 matches found
Privilege escalation
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create a mount point and...
CVE-2022-24679
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create an writable folder i...
CVE-2022-24680: Improper Link Resolution Before File Access
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create a mount point and...
CVE-2022-25297
This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save method may enable attackers to write files to arbitrary locations outside the designated target folder...
CVE-2022-25299
This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mghttpupload method may enable attackers to write files to arbitrary locations outside the designated target folder...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15-beta-1) +2 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15-beta-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.15-beta-1 -...
org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.0) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.15-beta-1)
org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder...
org.jenkins-ci.plugins:github-organization-folder (>=1.1, <=1.2) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.15)
org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.1,...
org.jenkins-ci.plugins:github-organization-folder (>=1.3, <=1.4) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.3)
org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.3,...
org.jenkins-ci.plugins:github-organization-folder (>=1.6-beta-1, <=1.6-beta-2) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.10-beta-1)
org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder...
io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.45), org.jenkins-ci.plugins:github-organization-folder (1.6) potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.10)
org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.9.1, =1.0.4...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15-beta-1) +2 more potentially affected by CVE-2022-25176 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15-beta-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.15-beta-1 -...
org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.0) potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.15-beta-1)
org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder...
org.jenkins-ci.plugins:github-organization-folder (>=1.1, <=1.2) potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (1.15)
org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.1,...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15-beta-1) +2 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15-beta-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.15-beta-1 -...
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.3, <=2.4), org.jenkins-ci.plugins:github-organization-folder (>=1.5, <=1.6) +1 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (2.14)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps-global-lib =2.3, =1.5, =1.6...
PHPUnit Command Injection Vulnerability
PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI...
PT-2022-1634
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions 10.0 SP1 and earlier Trend Micro Apex One as a Service versions prior to the fixed version Trend Micro Worry-Free Business Security 10.0 SP1 and earlier Trend Micro Worry-Free Business Security Services agents...
