30 matches found
PT-2023-5390 Ā· JenkinsĀ +1 Ā· JenkinsĀ +1
Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.423 and earlier, LTS versions 2.414.1 and earlier Description: The issue is related to the creation of a temporary file in the system temporary directory with default permissions when installing a plugin from a URL. This...
CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering
Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...
Gallery: Arbitrary command execution
Background Gallery is a PHP script for maintaining online photo albums. Description The upload handling code in Gallery places uploaded files in a temporary directory. After 30 seconds, these files are deleted if they are not valid images. However, since the file exists for 30 seconds, a carefull...
Cisco Security Advisory: OpenSSH Server Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: OpenSSH Server Vulnerabilities Revision Numeral: 1.0 INTERIM For Public Release 2003 September 17 0700 GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impac...
SQL injection in PHPGroupware
Preface PHPGroupware is a Groupware application written in PHP. It provides a framework of applications like calendar, ToDo list, notes, HR management, that come with PHPGroupware as well as an API to write new applications. All data is stored in an SQL database. + Problem PHPGroupware 0.9.12 the...
CheckPoint FW1 HTTP Security Hole
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings! A quite known proxy vulnerability was found for FW1 V4.1 SP5 plus hotfixes - thanks to Ryan Snyder for announcing the first bits on Firewall-1 mailing list. If you connect to a server you are allowed to connect to via HTTP proxy e.g. a comm...
Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: ICMP Unreachable vulnerability in Cisco 12000 Series Internet Router Revision 1.0 For Public Release 2001 November 14 08:00 UTC -0800 Summary The performance of Cisco 12000 series routers can be degraded when they have to send a large...
mcaffee.mycio.traversal.txt
----- Begin Hush Signed Message from [email protected] ----- -= SECURITY ADVISORY =- McAfee ASaP Virusscan - myCIO HTTP Server Directory Traversal Vulnerabilty Date: 28 June 2001 Impact: HIGH Affected: Any machine running the McAfee Agent ASaP VirusScan Software Tested on: NT Workstation 4.0,...
FreeBSD-SA-01:06.zope
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:06 Security Advisory FreeBSD, Inc. Topic: zope vulnerability allows escalation of privileges Category: ports Module: zope Announced: 2001-01-15 Credits: Erik Enge Affects...
FreeBSD-SA-00:40.mopd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:40 Security Advisory FreeBSD, Inc. Topic: mopd port allows remote root compromise Category: ports Module: mopd Announced: 2000-08-28 Credits: Matt Power , OpenBSD Affects...