CVE-2017-1000110

Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. It did not properly check the current user's authentication and authorization when...

CVE-2017-1000110

CVE-2017-1000110 concerns the Jenkins Blue Ocean plugin. Connected documents confirm that Blue Ocean allowed creation of GitHub organization folders that scan for repositories/branches with a Jenkinsfile and create pipelines, but did not properly verify the current user’s authentication/authoriza...

CVE-2017-1000106

This CVE (CVE-2017-1000106) affects Jenkins Blue Ocean integration for GitHub organization folders. The root cause is that the SCM content REST API did not verify the current user’s authentication/credentials when creating or editing pipelines for repositories within a GitHub organization folder....

CVE-2017-1000105

The optional Run/Artifacts permission can be enabled by setting a Java system property. Blue Ocean did not check this permission before providing access to archived artifacts, Item/Read permission was sufficient...

CVE-2017-1000105

The optional Run/Artifacts permission can be enabled by setting a Java system property. Blue Ocean did not check this permission before providing access to archived artifacts, Item/Read permission was sufficient...

CVE-2017-1000106

Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. Its SCM content REST API supports the pipeline creation and editing feature in Blue...

CVE-2017-1000105

CVE-2017-1000105 affects Jenkins Blue Ocean: an optional Run/Artifacts permission can be enabled via a Java system property, and Blue Ocean did not verify this permission before granting access to archived artifacts, with Item/Read permission being sufficient. Several connected advisories note th...

CVE-2017-1000110

Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. It did not properly check the current user's authentication and authorization when...

PT-2017-10810

Name of the Vulnerable Software and Affected Versions Jenkins Blue Ocean affected versions not specified Description The issue concerns the insufficient permission checks in Blue Ocean, a plugin for Jenkins. Specifically, when the optional Run/Artifacts permission is enabled by setting a Java...

PT-2017-10811

Name of the Vulnerable Software and Affected Versions Blue Ocean affected versions not specified Description The issue concerns the SCM content REST API in Blue Ocean, which does not properly check user authentication or credentials. This allows users with read access to a GitHub organization...

PT-2017-10815

Name of the Vulnerable Software and Affected Versions Blue Ocean affected versions not specified Description The issue concerns the improper checking of user authentication and authorization in Blue Ocean when configuring existing GitHub organization folders. This allows users with read access to...

ocean-dream.jp XSS vulnerability

Vulnerable URL:...

Arbitrary Code Execution Vulnerability in Ocean CMS

Ocean CMS is a film and television CMS program written in php. Ocean CMS has an arbitrary code execution vulnerability that can be exploited by attackers to gain control of the server...

Code Execution Vulnerability in Ocean CMS

Ocean Movie System aka Ocean CMS seacms is a PHP movie system. Ocean CMS has a code execution vulnerability, the vulnerability is due to the system fails to strictly filter the written files. Attackers can modify the background files through csrf write code, and then get the site management...

Ocean Cms V6.54 admin_datarelate.php parameter has SQL injection vulnerability

Ocean Movie System aka Ocean CMS seacms is a PHP movie system. Ocean CMS V6.54 admindatarelate.php parameter SQL injection vulnerability exists, the vulnerability is due to the system failed to user-submitted parameters for effective filtering. An attacker can use this vulnerability to obtain...

Reflected Cross-site Scripting Vulnerability in Ocean CMS V6.54 Backend Login Jump Page

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS V6.54 backend login jump page reflects cross-site scripting vulnerability. An attacker can exploit this vulnerability by constructing XSS statements, performing pop-...

Ocean CMS \admin\admin_collect.php page type parameter has SQL injection vulnerability

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\admincollect.php page type parameter SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information and can...

Ocean CMS \admin\admin_collent_news.php page rColumn parameter SQL injection vulnerability

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\admincollentnews.php page rColumn parameter SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive database information...

CloudBees Jenkins Blue Ocean Plugin Security Bypass Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . A...

Threat Outbreak Alert RuleID30191: Email Messages Distributing Malicious Software on August 14, 2017

Medium Alert ID: 54837 First Published: 2017 August 14 15:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30191 may contain the following files: Name |...