4593 matches found
CloudBees Jenkins URLTrigger Plugin Cross-Site Request Forgery Vulnerability
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software release/testing projects and some of the timed execution of the task . URLTrigger Plugin is...
CVE-2018-7787
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request...
CVE-2018-7787
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request...
Input validation
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request...
CVE-2018-7787
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request...
CVE-2018-7787
Schneider Electric U.motion Builder is affected by CVE-2018-7787 for versions prior to 1.3.4, due to improper validation of the context parameter in HTTP GET requests. The vulnerability enables information disclosure (C: Low, I: None, A: None per NVD entry) with attack vector over network and low...
PT-2018-18283
Name of the Vulnerable Software and Affected Versions: Schneider Electric U.motion Builder versions prior to 1.3.4 Description: The issue is caused by improper validation of input of the context parameter in an HTTP GET request. Recommendations: For versions prior to 1.3.4, update to version 1.3....
PT-2018-11530
Name of the Vulnerable Software and Affected Versions Sandoba CP:Shop version v2016.1 Description A cross-site scripting XSS issue was found, allowing remote attackers to inject script codes into the client-side of the web application through vulnerable parameters. The attack vector is...
CVE-2018-1000606
A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL...
Server side request forgery (ssrf)
A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL...
CVE-2018-1000606
A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL...
CVE-2018-1000525
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...
Information disclosure
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...
CVE-2018-1000525
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...
CVE-2018-1000525
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...
PT-2018-9422
Name of the Vulnerable Software and Affected Versions openpsa versions prior to the version containing commit 097eae0 Description The issue concerns a PHP Object Injection vulnerability. It occurs when form data passed as GET request variables is specially crafted to contain serialized PHP object...
PT-2018-9461
Name of the Vulnerable Software and Affected Versions Jenkins URLTrigger Plugin versions 0.41 and earlier Description A server-side request forgery issue exists that allows attackers with Overall/Read access to cause the server to send a GET request to a specified URL. This is due to a...
CVE-2018-1000606: Server-Side Request Forgery (SSRF)
A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL...
CVE-2018-1000525: Deserialization of Untrusted Data
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This...