7418 matches found
CVE-2018-13365
An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page...
CVE-2018-13365
An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page...
CVE-2018-13365
CVE-2018-13365 affects Fortinet FortiOS 6.0.1, 5.6.5 and earlier, where the Application Control Block page leaks the FortiGate’s private IP address and hostname. The root cause is information disclosure via the Application Control block page. Fortinet’s advisory FG-IR-18-085 (and related NT vulne...
CVE-2018-13375
An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in...
CVE-2018-13375
An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in...
CVE-2018-13375: Improper Neutralization of Input During Web Page Generation
An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in...
PT-2019-6084
Name of the Vulnerable Software and Affected Versions FortiManager versions 5.6.0 and below FortiAnalyzer versions 5.6.0 and below Description The issue is related to the failure to protect the web page structure, allowing an attacker to redirect users to a malicious web page. An improper...
SUSE-SU-2019:1285-1 Security update for libvirt
This update for libvirt fixes the following issues: Security issue fixed: - CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode bsc1131595...
Apache Tomcat 9.0.x < 9.0.10 Security Misconfiguration
Binary data 700707.pasl...
CVE-2019-10314
Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10314
Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10317
Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM...
Code injection
Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
Code injection
Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10317
Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10317
Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10317
The CVE-2019-10317 entry affects the Jenkins SiteMonitor Plugin (version 0.5 and earlier), which unconditionally disabled SSL/TLS certificate validation and hostname verification for the Jenkins controller JVM. Root cause: the plugin’s behavior bypassed standard TLS checks globally, exposing the ...
CVE-2019-10314
CVE-2019-10314 affects the Jenkins Koji Plugin, which disables SSL/TLS and hostname verification globally for the Jenkins master JVM. The vulnerability is described across multiple sources (NVD entry, Red Hat advisory, GHSA) as the plugin unconditionally bypassing certificate validation for the e...