Cross site request forgery (csrf)

A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...

CVE-2019-10326

A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...

CVE-2019-10325

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...

CVE-2019-10326

A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...

CVE-2019-10326

The CVE-2019-10326 issue affects Jenkins Warnings NG Plugin ≤ 5.0.0. A cross-site request forgery (CSRF) vulnerability allows attackers to reset warning counts for future builds. Root cause: CSRF in the plugin’s handling of build-warnings state. Impact is limited to unauthorized state change of b...

CVE-2019-10325

CVE-2019-10325 affects the Jenkins Warnings NG Plugin, version 5.0.0 and earlier. The issue is described as a cross-site scripting vulnerability that allows an attacker with Job/Configure permission to inject arbitrary JavaScript into build overview pages. The underlying cause is a stored/xss-lik...

CVE-2019-10325

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...

CVE-2019-10325

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...

PT-2019-11727 · Jenkins · Jenkins Warnings Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Warnings NG Plugin versions 5.0.0 and earlier Description: A cross-site request forgery issue allows attackers to reset warning counts for future builds. Recommendations: For Jenkins Warnings NG Plugin versions 5.0.0 and earlier, upda...

Cross Site Scripting (XSS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2012-1948,...

Clickjacking Attack

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2012-1948,...

Privilege Escalation

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2012-1948,...

Spoofing Vulnerability

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2012-1948,...

Denial Of Service (DoS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2012-1948,...

Exploit for Product UI does not Warn User of Unsafe Actions in Libreoffice

Manual básico de generación de un exploit En esta entrada se...

openSUSE Security Update : ntp (openSUSE-2019-1158)

This update for ntp fixes the following issues : Security issue fixed: - CVE-2019-8936: Fixed a NULL pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other isses addressed : - Fixed an issue which caused openSSL mismatch bsc1125401 - Fix...

Security update for ntp (moderate)

openSUSE Security Update: Security update for ntp Announcement ID: openSUSE-SU-2019:1143-1 Rating: moderate References: 1128525 Cross-References: CVE-2019-8936 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for ntp fixes the...

SUSE-SU-2019:0789-1 Security update for ntp

This update for ntp fixes the following issues: Security issue fixed: - CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other isses addressed: - Fixed an issue which caused openSSL mismatch bsc1125401 - Fixed...

SUSE SLED15 / SLES15 Security Update : ntp (SUSE-SU-2019:0777-1)

This update for ntp fixes the following issues : Security issue fixed : CVE-2019-8936: Fixed a NULL pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other issues addressed: Fixed several bugs in the BANCOMM reclock driver. Fixed...

SUSE-SU-2019:0777-1 Security update for ntp

This update for ntp fixes the following issues: Security issue fixed: - CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other issues addressed: - Fixed several bugs in the BANCOMM reclock driver. - Fixed...