249 matches found
PT-2020-4107
Name of the Vulnerable Software and Affected Versions: Apache NetBeans versions up to and including 11.2 Description: The issue is related to insufficient validation of input data in the Apache NetBeans autoupdate system, which does not fully validate code signatures. This could allow a remote...
Apache NetBeans PAC Code Execution
The vulnerability of the Proxy Auto-Configuration PAC configuration file of the Apache NetBeans application development environment is related to the lack of measures taken to neutralize the script in the web page’s attributes. Exploiting this vulnerability allows a malicious actor to execute...
Apache NetBeans Remote Command Execution Vulnerability
Apache NetBeans is the United States Apache Apache Software Foundation's set of scalable open source software development tools. The product supports Java, C/C++, PHP and HTML5 program development. A remote command execution vulnerability exists in the Proxy Auto-Configuration PAC interpretation ...
CVE-2018-17191
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
UBUNTU-CVE-2018-17191
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
CVE-2018-17191
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
DEBIAN-CVE-2018-17191
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
CVE-2018-17191
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
Remote code execution
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
CVE-2018-17191
The vulnerability concerns Apache NetBeans (incubating) 9.0 with NetBeans Proxy Auto-Configuration (PAC) interpretation, which is vulnerable to remote command execution (RCE). The root cause, as described in the sources, is the use of the Nashorn JavaScript engine during PAC processing, which lea...
CVE-2018-17191
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
CVE-2018-17191
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
CVE-2018-17191
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
CVE-2018-17191: Undefined Security Weakness
Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...
PT-2018-3343 · Apache · Apache Netbeans
Name of the Vulnerable Software and Affected Versions: Apache NetBeans versions 9.0 Description: The issue is related to the Proxy Auto-Configuration PAC file in the Apache NetBeans development environment, which fails to neutralize script code in attributes on a web page. This can allow a remote...
CVE-2018-1000542
netbeans-mmd-plugin version = 1.4.3 contains a XML External Entity XXE vulnerability in MMD file import that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted MMD file...
CVE-2018-1000542
netbeans-mmd-plugin version = 1.4.3 contains a XML External Entity XXE vulnerability in MMD file import that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted MMD file...
Xxe
netbeans-mmd-plugin version = 1.4.3 contains a XML External Entity XXE vulnerability in MMD file import that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted MMD file...
CVE-2018-1000542
netbeans-mmd-plugin version = 1.4.3 contains a XML External Entity XXE vulnerability in MMD file import that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted MMD file...
CVE-2018-1000542
CVE-2018-1000542 affects the NetBeans MMD plugin (version ≤ 1.4.3). The vulnerability is an XML External Entity (XXE) issue in MMD file import that can lead to information disclosure, server-side request forgery, or remote code execution, as exploited by specially crafted MMD files. The connected...