Low severity vulnerability that affects sensu

The sensu rubygem prior to version 1.2.0 contains a CWE-522 Insufficiently Protected Credentials flaw that can result in sensitive configuration data e.g. passwords being logged in clear-text. Users are advised to upgrade to rubygem version 1.2.1 or later...

Directory Traversal

wordpress is vulnerable to denial of service DoS attacks. The vulnerability exists in wp-includes/class-phpass.php where a large password can be used to attempt to cause DoS attacks in a password protected post...

The vulnerability of the tz_assign() function in the Qualcomm Trusted Execution Environment component of the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tzassign function in the Qualcomm Trusted Execution Environment for Android operating systems arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, an...

The vulnerability of Qualcomm Audio component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm Audio component in the Android operating system arises from insufficient validation of input data during the playback of WMA files. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of Mozilla Firefox’s Reader View reading mode allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Reader View reading mode in Mozilla Firefox browser is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of the Mozilla Firefox browser, related to the lack of protection for service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Mozilla Firefox browser, related to an authentication error during HTTP requests, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to an authentication error during HTTP requests. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability in the display of the Activity Stream page on Mozilla Firefox browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Activity Stream page display on Mozilla Firefox is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the “file:“ URL...

The vulnerability of the Wireless Data Service module of the Qualcomm Data Services component in the Android operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Wireless Data Service module of the Qualcomm Data Services operating system in Android is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

The vulnerability of Mozilla Firefox’s browser printing mechanism, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Mozilla Firefox browser’s printing mechanism is related to an incorrect definition of links before accessing the file during printing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using...

The vulnerability of Mozilla Firefox’s toolbars allows a hacker to gain unauthorized access to protected information.

The vulnerability of Mozilla Firefox’s developer tools is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Deceased Patient Data Being Sold on Dark Web

It is no shocker medical records are a prime target for cybercriminals. But less intuitive is the market for medical records of the deceased on the dark web. We took a closer look at the reason behind this strange trend. Here is what we found. First off, despite best efforts, stolen medical recor...

Doorkeeper gem does not revoke token for public clients

Any OAuth application that uses public/non-confidential authentication when interacting with Doorkeeper is unable to revoke its tokens when calling the revocation endpoint. A bug in the token revocation API would cause it to attempt to authenticate the public OAuth client as if it was a...

Elevation of Privilege Vulnerability in Multiple Qualcomm Products

The Qualcomm SD 210 and others are central processing unit CPU products for mobile devices from Qualcomm Incorporated. An elevation of privilege vulnerability exists in multiple Qualcomm products. An attacker could exploit the vulnerability to remove the RPMB...

CVE-2018-1000403

Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to...

Design/Logic Flaw

Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to...

Design/Logic Flaw

Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to ha...

CVE-2018-1000404

Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability...

Insufficiently Protected Credentials

The Jenkins AWS CodePipeline Plugin contains an Insufficiently Protected Credentials vulnerability...

The vulnerability of the Qualcomm Video Services component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Video Services on the Android operating system is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...