Missing permission check in files-found-trigger allows listing the Jenkins controller file system

files-found-trigger 1.5 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. A sequence of requests can be...

PT-2022-4014 · Jenkins · Jenkins Files Found Trigger Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Files Found Trigger Plugin versions 1.5 and earlier Description: The issue is related to insufficient authorization procedures in the plugin. This allows a remote attacker to gain unauthorized access to protected information...

Huawei CV81-WDM FW Printer DoS

The vulnerability of Huawei CV81-WDM FW printer’s microprogramming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted package...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 that arises from the execution of a carefully crafted or incorrectly formatted det instruction, which could lead to the creation of an exception...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 that arises from the execution of a carefully crafted or incorrectly formatted sfence.vma instruction that could lead to the creation of an exception...

CVE-2022-32263

Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719...

CVE-2022-27928

Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol...

CVE-2022-27934

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP...

PT-2022-18696 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions 27.0 through 27.2 Description: The issue allows remote attackers to trigger a software abort via HTTP. Recommendations: For versions 27.0 through 27.2, update to version 27.3 or later to resolve the issue...

CVE-2021-26384

A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...

Command injection

A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...

CVE-2021-26384: Out-of-bounds Read

A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...

PT-2022-9751 · Amd · Athlon™ Series +33

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: A malformed SMI command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SM...

FFmpeg Debian Code Execution

The vulnerability of the FFmpeg multimedia library in the Debian GNU/Linux operating system is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to trigger an octath in the service or execute arbitrary code...

SEPCOS Single Package control reboot

The vulnerability of the SEPCOS Single Package control and protection relay software is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow an attacker, operating remotely, to trigger a system reboot by executing the JS functi...

Event Timeline <= 1.1.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitize and escape Timeline Text, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed Create/edit a Timeline, put the following payload in the "Text" field at the bottom: alert/XSS/ Click save...

CVE-2022-29892

Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to repeatedly display errors in certain functions and cause a denial-of-service DoS...

CVE-2019-25071

A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been...

Apple iPhone 安全漏洞

The Apple iPhone is a smartphone from Apple, an American Apple Apple company. A security vulnerability exists in Apple iPhone versions prior to 12.4.1, which stems from the ability to play an audio or video file to launch Siri on the same device, allowing commands to be executed remotely...

Outside In Filters Component DoS

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK set is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...