CVE-2021-43578

CVE-2021-43578 affects the Jenkins Squash TM Publisher (Squash4Jenkins) Plugin, version 1.0.0 and earlier. The root cause is an agent-to-controller message that performs no input validation, enabling an attacker who can control agent processes to replace arbitrary files on the Jenkins controller ...

Jenkins 安全漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. Jenkins Plugin has a security vulnerability that stems from the Squash TM Publisher plugin version 1.0.0 and earlier...

Agent-to-controller security bypass in Squash TM Publisher (Squash4Jenkins) allows writing arbitrary files

Squash TM Publisher Squash4Jenkins 1.0.0 and earlier implements an agent-to-controller message that does not implement any validation of its input. This allows attackers able to control agent processes to replace arbitrary files on the Jenkins controller file system with an attacker-controlled JS...

PT-2021-27884

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 2. The crash state involves several functions: fr unix time from tm, fr unix...

PT-2021-27865

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 2. The crash state involves several functions: fr unix time from tm, fr unix...

tm-collections.de Improper Access Control vulnerability OBB-2170458

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tm-collection.de Improper Access Control vulnerability OBB-2165760

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-12896

Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM PMem versions prior to 1.2.0.5446 IntelR OptaneTM PMem versions prior to 2.2.0.1547 Description: The issue is related to improper input validation, which may allow a privileged user to potentially enable denial of service via...

CVE-2021-0083: Improper Input Validation

Improper input validation in some IntelR OptaneTM PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access...

How to Change Password for LDAP Authentication for NetScaler Gateway and AAA-TM Users

This article provides information on how LDAP password change can be achieved for NetScaler Gateway and AAA-TM users. Prerequisite NetScaler 10.1.x onwards...

PT-2021-9445

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to improper access control in some IntelR ThunderboltTM controllers. This may allow an authenticated user to potentially enable denial of service...

CVE-2020-24515: Undefined Security Weakness

Protection mechanism failure in some IntelR RealSenseTM IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-12289: Out-of-bounds Write

Out-of-bounds write in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12295: Improper Input Validation

Improper input validation in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12294: Undefined Security Weakness

Insufficient control flow management in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

PT-2021-9444

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to an out-of-bounds write in some IntelR ThunderboltTM controllers. This may allow an authenticated user to potentially enable denial of service...

PT-2021-9450

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to improper input validation in some IntelR ThunderboltTM controllers, which may allow an authenticated user to potentially enable denial of...

PT-2021-11042

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM IDs affected versions not specified Description: A protection mechanism failure in some IntelR RealSenseTM IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-0106: Incorrect Default Permissions

Incorrect default permissions in the IntelR OptaneTM DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-9446

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to uncontrolled resource consumption in some IntelR ThunderboltTM controllers. This may allow an authenticated user to potentially enable denial ...