CloudBees Jenkins Mattermost Notification Plugin Server Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Mattermost Notification Plugin is used in one...

Authorization Bypass

mysql is vulnerable to authorization bypass attacks. The vulnerability exists as MySQL 5.0.88, and possibly other versions and platforms, allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments...

Foxit PDF SDK ActiveX Command Injection Vulnerability

Foxit PDF SDK ActiveX is China's Foxit Foxit Software Corporation of a PDF software development kit, but also a visual programming components, it provides PDF display and annotation and other functions. Foxit PDF SDK ActiveX 5.5.0 and previous versions of the command injection vulnerability, the...

Huawei Watch Privilege Control Vulnerability

Huawei Watch 2 is Huawei's second generation smart sports watch. A privilege control vulnerability exists in Huawei Watch 2. Due to misconfiguration of privileges for specific operations, an attacker who has been informed that the watch is bound to a Huawei account can bypass privilege checking b...

UBUNTU-CVE-2018-16509

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction...

Unauthorized access vulnerability in snap.cgi of Schneider Pelco Sarix Pro camera

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. An unauthorized access vulnerability exists in the snap.cgi of the Schneider Pelco Sarix Pro camera. The vulnerability stems from the lack of privilege checks on the snap.cgi interface, which can be exploited by an...

Schneider Pelco Sarix Pro camera snapshot.cgi has an unauthorized access vulnerability

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. An unauthorized access vulnerability exists in the snapshot.cgi of the Schneider Pelco Sarix Pro camera. The vulnerability stems from the lack of privilege checks on the snapshot.cgi interface, which can be exploited b...

Schneider Pelco Sarix Pro camera fastjpeg has unauthorized access vulnerability

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. An unauthorized access vulnerability exists in the Schneider Pelco Sarix Pro camera fastjpeg, which stems from the lack of privilege checks on the fastjpeg interface, and can be exploited by an attacker to gain...

CloudBees Jenkins Kubernetes Plugin Information Disclosure Vulnerability (CNVD-2018-15088)

CloudBees Jenkins is a set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version release/testing projects and some timed tasks.Kubernetes Plugin is one of the dynamically configured using the Kubernetes cluster Jenkins agents The...

CloudBees Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin Information Disclosure Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Maven Artifact ChoiceListProvider...

CloudBees Jenkins Accurev Plugin Information Disclosure Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Accurev Plugin is used in one of the software...

CloudBees Jenkins SaltStack Plugin Information Disclosure Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . SaltStack Plugin is used in one of the automated...

CloudBees Jenkins Resource Disposer Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Resource Disposer Plugin is used in...

CVE-2017-7530

In CloudForms Management Engine cfme before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that MiqExpression will execute that is triggerable by API users. An attacker could use this to execute actions they should n...

CloudBees Jenkins Openstack Cloud Plugin Information Disclosure Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. that are used to monitor order repetitive work.Openstack Cloud Plugin is a plugin for creating Openstack cloud instances using one of the ... CloudBees Jenkins An information...

Micro Focus openSUSE Open Build Service Design Vulnerability

Micro Focus openSUSE Open Build Service is a software distribution system from Micro Focus UK. The system builds and distributes software packages from source code in an automated, consistent and repeatable manner. A security vulnerability exists in the handling of reviews in Micro Focus openSUSE...

CloudBees Jenkins Dependency Graph Viewer plugin unauthorized modification vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Dependency Graph Viewer is used in o...

Huawei iBMC System Improper Authorization Vulnerability

Huawei iBMC system is a server remote management system from Huawei, China. The Huawei iBMC system is vulnerable to an improper authorization vulnerability, which occurs when the system fails to properly perform privilege checks. The vulnerability is exploited to cause information disclosure when...

CVE-2017-15328

Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability. An attacker can access a specific URL of the affect product. Due to improper verification of the privilege, successful exploitation may cause information leak...

Jenkins Favorite Plugin Design Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Favorite Plugin is one...