Jenkins HashiCorp Vault Plugin 安全漏洞

Jenkins HashiCorp Vault Plugin is an open source plugin for Jenkins. A security vulnerability exists in Jenkins Plugin HashiCorp Vault 371.v884a4dd60fb6 and prior versions, which stems from a failure to set up the proper Vault credential lookup context, which could result in access to unauthorize...

EUVD-2021-7056

Malicious code in bioql PyPI...

EUVD-2023-53253

Malicious code in bioql PyPI...

Security Bulletin: IBM Flex System Manager (FSM) is affected by security vulnerability CVE-2014-3099

Summary IBM Flex System Manager FSM is affected by security vulnerability CVE-2014-3099 Vulnerability Details Abstract IBM Flex System Manager FSM is affected by security vulnerability CVE-2014-3099 Content Vulnerability Details: CVE-ID: CVE-2014-3099 Description: The FSM allows an attacker with...

Oracle Linux 5 / 6 : curl (ELSA-2011-0918)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0918 advisory. 7.19.7-26.el61.1 - do not delegate GSSAPI credentials CVE-2011-2192 Tenable has extracted the preceding description block directly from the Oracle Linux...

PHP Advanced Transfer Manager 1.30 - Remote Unauthorized Access

source: https://www.securityfocus.com/bid/15237/info PHP Advanced Transfer Manager can allow remote attackers to gain unauthorized access. Access to sensitive files containing authentication credentials is not restricted, therefore an attacker can simply issue a GET request to obtain a user's...