7617 matches found
Jenkins Plugin Pipeline:Groovy Libraries 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...
CVE-2022-43405
CVE-2022-43405 describes a sandbox bypass in Jenkins Pipeline: Groovy Libraries Plugin (versions up to 612.v84da_9c54906d and earlier). An attacker with permission to define untrusted Pipeline libraries and sandboxed scripts can bypass the sandbox and execute arbitrary code in the Jenkins control...
PT-2022-26890 · Jenkins · Jenkins Pipeline: Shared Groovy Libraries Plugin +2
Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Deprecated Groovy Libraries Plugin versions 583.vf3b 454e43966 and earlier Jenkins Pipeline: Groovy Libraries Plugin versions 612.v84da 9c54906d and earlier Description: A sandbox bypass issue allows attackers with permissio...
CVE-2022-43405
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary co...
CVE-2022-43406
CVE-2022-43406 is a sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier. The issue allows attackers with permission to define untrusted Pipeline libraries to define and run sandboxed scripts, including Pipelines, enabling arbitrary c...
Jenkins Plugin Pipeline:Deprecated Groovy Libraries 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
Creating Awareness of External JavaScript Libraries in Web Applications
Qualys Web Application Scanning WAS routinely reviews and solicits customer feedback regarding vulnerabilities. This may be to enhance the detection or the detections reporting. Previously, all JavaScript libraries detected on an application are reported under the Information Gathering QID 150176...
ai.traceroot:traceroot-sdk-java (>=0.0.1-alpha.2 <=0.0.1-alpha.5), be.cylab.mark:server (>=0.0.10 <=0.0.19) +3620 more potentially affected by CVE-2022-41404 via org.ini4j:ini4j (>=0.3.3 <=0.5.4)
org.ini4j:ini4j MAVEN version =0.3.3, =0.0.1-alpha.2, =0.0.10, =3.00.4, =3.00.3, =4.00.10, =2.0.4, =0.0.3, =0.1.0, =1.0.1, =1.0.0, =1.0, =0.2.0, =0.2.0, =2.0.0, =2.3.1 and more Source cves: CVE-2022-41404 Source advisory: OSV:GHSA-JR6H-R7VG-F9MC...
Cross-site Request Forgery (CSRF)
moodle is vulnerable to cross-site request forgery. A remote attacker is able to cause CSRF attacks, because enabling and disabling installed H5P libraries does not include the necessary token to prevent CSRF risk...
The arithmetic operator can overflow
Lines of code Vulnerability details Impact It is possible to cause an integer overflow or underflow in the arithmetic operation. Proof of Concept Contract: GraphProxyAdmin Function name: getProxyPendingImplementationaddress PC address: 1898 Estimated Gas Usage: 1387 - 36513 In file:...
The arithmetic operator can overflow
Lines of code Vulnerability details Impact It is possible to cause an integer overflow or underflow in the arithmetic operation. Description An overflow/underflow happens when an arithmetic operation reaches the maximum or minimum size of a type. For instance if a number is stored in the uint8...
CVE-2021-40163
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component...
LofyGang Distributed ~200 Malicious NPM Packages to Steal Credit Card Data
Multiple campaigns that distributed trojanized and typosquatted packages on the NPM open source repository have been identified as the work of a single threat actor dubbed LofyGang. Checkmarx said it discovered 199 rogue packages totaling thousands of installations, with the group operating for...
CVE-2022-26238
The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...
CVE-2022-26238
The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...
CVE-2022-26236
The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...
CVE-2022-26236
The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...
Design/Logic Flaw
The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...