2414 matches found
CVE-2022-34814: Incorrect Authorization
Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...
Jenkins Plugin Request: Rename or Delete â Cross-site Request Forgery Vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site request forgery vulnerability...
PT-2022-31935
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are separated. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-31504
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-31956
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A use-after-free issue was discovered in the ext4 file system, specifically in the ext4 rename dir prepare function. The actual impact and attack plausibility of this issue have not yet been...
PT-2022-31731
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are not properly separated. This is an automated identification of a potential security issue, but the actual impact...
PT-2022-31153
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue concerns the kernfs component, specifically the separation of kernfs pr cont buf and rename lock. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2022-30805
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue concerns the kernfs component, specifically the separation of kernfs pr cont buf and rename lock. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2022-31198
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A use-after-free issue was discovered in the ext4 file system, specifically in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven...
PT-2022-31468
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are separated. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-32084
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are separated. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-30861
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-32310
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A use-after-free issue was discovered in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-32197
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are not properly separated. This is an automated identification of a potential security issue, but the actual impact...
PT-2022-32221
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-32107
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
Non-preserved file permissions
When curl saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target filename. In that rename operation, it might accidentally widen the permissions for the target file, leaving the updated...
UBUNTU-CVE-2022-32207
When curl 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the...
curl security vulnerabilities
curl is a tool for transferring data from or to a server. A security vulnerability exists in curl versions 7.69.0 through 7.83.1, which stems from the fact that curl can accidentally inflate the permissions of a target file during a rename operation...
