10835 matches found
CVE-2019-10349
A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...
CVE-2019-10349
The CVE-2019-10349 issue affects Jenkins Dependency Graph View Plugin (≤0.13). The root cause is a stored XSS vulnerability in the plugin’s Configure module where the Display Name field can be exploited to inject arbitrary HTML/JavaScript into plugin-provided Jenkins pages. Impact per sources is ...
CVE-2019-10349
A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins...
Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019
Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019 Summary This update for Windows Server 2012 and Windows Embedded 8 Standard includes the quality improvements from KB4503263 released June 11, 2019, in addition to these key changes: Addresses an issue that may display...
The vulnerability of the .NET SDK WebForm Viewer component, a software tool for report development with SAP Crystal Reports for Visual Studio, allows attackers to disclose protected information.
The vulnerability of the .NET SDK WebForm Viewer component, a software tool for report development with SAP Crystal Reports for Visual Studio, is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, includin...
PT-2019-11748 · Jenkins · Jenkins Dependency Graph Viewer Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Dependency Graph Viewer Plugin versions 0.13 and earlier Description: A stored cross site scripting issue allows attackers who can configure jobs in Jenkins to inject arbitrary HTML and JavaScript into the plugin-provided web pages in...
Microsoft Windows Event Viewer XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Event...
IrfanView User Mode Write Access Conflict Vulnerability
IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.52 suffers from a user-mode write access conflict vulnerability starting at image00400000+0x00000000000249c6. An...
FastStone Image Viewer Buffer Overflow Vulnerability (CNVD-2019-34853)
FastStone Image Viewer is an image viewer. The product supports image browsing, conversion and editing features. A buffer overflow vulnerability exists in FastStone Image Viewer. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among others...
FastStone Image Viewer Buffer Overflow Vulnerability (CNVD-2019-34854)
FastStone Image Viewer is an image viewer. The product supports image browsing, conversion and editing features. A buffer overflow vulnerability exists in FastStone Image Viewer. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among others...
FastStone Image Viewer Buffer Overflow Vulnerability (CNVD-2019-34855)
FastStone Image Viewer is an image viewer. The product supports image browsing, conversion and editing features. A buffer overflow vulnerability exists in FastStone Image Viewer. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among others...
CVE-2019-13289
In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool...
UBUNTU-CVE-2019-13283
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid length before making a fixed-length copy. It can, for example, be triggered by sending a crafted PDF document to the...
CVE-2019-13245
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1...
CVE-2019-13246
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601...
CVE-2019-13245
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1...
CVE-2019-13246
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601...
CVE-2019-13244
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d...
