5887 matches found
CVE-2018-1000068
CVE-2018-1000068 affects Jenkins core versions <= 2.106 and LTS
CVE-2018-1000068
An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin resource files in the META-INF and WEB-INF directories that should not be accessible, if the Jenkins home directory is on a case-insensitiv...
CVE-2018-1000068: Exposure of Sensitive Information to an Unauthorized Actor
An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin resource files in the META-INF and WEB-INF directories that should not be accessible, if the Jenkins home directory is on a case-insensitiv...
Improper input validation allows unintended access to plugin resource files on case-insensitive file systems
Jenkins did not take into account case-insensitive file systems when preventing access to plugin resource files that should not be accessible. This allowed users with Overall/Read permission to download plugin resource files in META-INF and WEB-INF directories, such as the plugins' JAR files, whi...
PT-2018-3789
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.32 PHP versions 5.6.x prior to 5.6.18 PHP versions 7.x prior to 7.0.3 Description The issue arises from insufficient input validation in the stream get meta data function, allowing an attacker to control the return...
[SECURITY] Fedora 26 Update: kernel-4.14.16-200.fc26
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.14.14-200.fc26
The kernel meta package...
[SECURITY] Fedora 27 Update: kernel-4.14.13-300.fc27
The kernel meta package...
HackerOne: Partial disclosure of undisclosed programs through <meta> tags
Summary Report pages contain tags that contains the description of the report. New browsers create thumbnails of recently visited pages that that display the content of the tags. Since the meta tags contain the contents of report, private report contents are partially disclosed. Description Moder...
[SECURITY] Fedora 27 Update: kernel-4.14.11-300.fc27
The kernel meta package...
WordPress Smart Google Code Inserter Plugin < 3.5 - Authentication Bypass / SQL Injection
Exploit for php platform in category web applications Exploit Title: Smart Google Code Inserter 3.5 - Auth Bypass/SQLi Google Dork: inurl:wp-content/plugins/smart-google-code-inserter/ Date: 26-Nov-17 Exploit Author: Benjamin Lim Vendor Homepage: http://oturia.com/ Software Link:...
[SECURITY] Fedora 27 Update: kernel-4.14.8-300.fc27
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.14.8-200.fc26
The kernel meta package...
[SECURITY] Fedora 27 Update: kernel-4.14.7-300.fc27
The kernel meta package...
CVE-2017-5255
In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user including the otherwise low-privilege readonly user to inject shell meta-characters as part of a specially-crafted POST request...
Design/Logic Flaw
In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user including the otherwise low-privilege readonly user to inject shell meta-characters as part of a specially-crafted POST request...
CVE-2017-5255
In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user including the otherwise low-privilege readonly user to inject shell meta-characters as part of a specially-crafted POST request...
PT-2017-16423
Name of the Vulnerable Software and Affected Versions Cambium Networks ePMP firmware versions prior to 3.5 Description The issue is related to a lack of input sanitation for certain parameters on the web management console. This allows any authenticated user, including low-privilege readonly user...