Lucene search
+L

140 matches found

Fedora
Fedora
added 2024/03/07 10:33 p.m.33 views

[SECURITY] Fedora 40 Update: octave-8.4.0-6.fc40

GNU Octave is a high-level language, primarily intended for numerical computations. It provides a convenient command line interface for solving linear and nonlinear problems numerically, and for performing other numerical experiments using a language that is mostly compatible with Matlab. It may...

8.8CVSS7AI score0.02578EPSS
SaveExploits3
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/12/22 1:01 a.m.3 views

Malicious code in jupyter_matlab_labextension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 900d46c65aa8b8777f7294d2de6d39593988ebf0cae04c5f545be6322b66e558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/12/21 5:57 p.m.6 views

Malicious code in run-matlab-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e112d304d52f86f1e23bf9c1b924fa1b169382680990b66bc9268c01fc426aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2023/12/21 5:57 p.m.19 views

MAL-2023-8733 Malicious code in run-matlab-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e112d304d52f86f1e23bf9c1b924fa1b169382680990b66bc9268c01fc426aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/11/29 3:30 p.m.25 views

Jenkins MATLAB Plugin XML External Entity vulnerability

Jenkins MATLAB Plugin determines whether a user-specified directory on the Jenkins controller is the location of a MATLAB installation by parsing an XML file in that directory. MATLAB Plugin 2.11.0 and earlier does not perform permission checks in several HTTP endpoints implementing related form...

9.8CVSS7AI score0.00844EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2023/11/29 3:30 p.m.27 views

Jenkins MATLAB Plugin cross-site request forgery vulnerability

Jenkins MATLAB Plugin determines whether a user-specified directory on the Jenkins controller is the location of a MATLAB installation by parsing an XML file in that directory. MATLAB Plugin 2.11.0 and earlier does not perform permission checks in several HTTP endpoints implementing related form...

8.8CVSS7AI score0.00396EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2023/11/29 3:30 p.m.32 views

Jenkins MATLAB Plugin missing permission checks

Jenkins MATLAB Plugin determines whether a user-specified directory on the Jenkins controller is the location of a MATLAB installation by parsing an XML file in that directory. MATLAB Plugin 2.11.0 and earlier does not perform permission checks in several HTTP endpoints implementing related form...

9.8CVSS7AI score0.00789EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/11/29 3:30 p.m.59 views

GHSA-CV4X-9F34-8RP9 Jenkins MATLAB Plugin missing permission checks

Jenkins MATLAB Plugin determines whether a user-specified directory on the Jenkins controller is the location of a MATLAB installation by parsing an XML file in that directory. MATLAB Plugin 2.11.0 and earlier does not perform permission checks in several HTTP endpoints implementing related form...

7.1CVSS9.6AI score0.00789EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/29 3:30 p.m.68 views

GHSA-82Q9-88M2-4V68 Jenkins MATLAB Plugin XML External Entity vulnerability

Jenkins MATLAB Plugin determines whether a user-specified directory on the Jenkins controller is the location of a MATLAB installation by parsing an XML file in that directory. MATLAB Plugin 2.11.0 and earlier does not perform permission checks in several HTTP endpoints implementing related form...

7.1CVSS9.6AI score0.00844EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/29 3:30 p.m.71 views

GHSA-9F5G-RGCR-8GRW Jenkins MATLAB Plugin cross-site request forgery vulnerability

Jenkins MATLAB Plugin determines whether a user-specified directory on the Jenkins controller is the location of a MATLAB installation by parsing an XML file in that directory. MATLAB Plugin 2.11.0 and earlier does not perform permission checks in several HTTP endpoints implementing related form...

7.1CVSS8.8AI score0.00396EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/29 2:15 p.m.11 views

CVE-2023-49656

Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

9.8CVSS5.8AI score0.00844EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/29 2:15 p.m.6 views

CVE-2023-49654

Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system...

9.8CVSS7.3AI score0.00789EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/29 2:15 p.m.30 views

CVE-2023-49654

Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system...

9.8CVSS0.00789EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/29 2:15 p.m.33 views

CVE-2023-49656

Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

9.8CVSS0.00844EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/29 2:15 p.m.11 views

CVE-2023-49655

A cross-site request forgery CSRF vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system...

8.8CVSS5.7AI score0.00396EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/29 2:15 p.m.39 views

CVE-2023-49655

A cross-site request forgery CSRF vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system...

8.8CVSS0.00396EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/29 2:15 p.m.23 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system...

6.8CVSS7AI score0.00396EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/11/29 2:15 p.m.30 views

Information disclosure

Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system...

7.5CVSS7AI score0.00789EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/11/29 2:15 p.m.23 views

Xxe

Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.5CVSS7AI score0.00844EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/29 1:45 p.m.46 views

CVE-2023-49656

Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

9.7AI score0.00844EPSS
SaveExploits0References2
Rows per page
Query Builder