Lucene search
+L

4871 matches found

ATTACKERKB
ATTACKERKB
added 2021/03/18 4:15 p.m.5 views

CVE-2021-28789

The unofficial apple/swift-format extension before 1.1.2 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted apple-swift-format.path configuration value that triggers execution upon opening the workspace...

7.8CVSS8.3AI score0.01714EPSS
SaveExploits0References3
Prion
Prion
added 2021/03/18 4:15 p.m.23 views

Design/Logic Flaw

The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configuration value that triggers execution upon opening the workspace...

6.8CVSS8.1AI score0.01678EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/03/18 3:04 p.m.27 views

CVE-2021-28790

The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configuration value that triggers execution upon opening the workspace...

8.2AI score0.01678EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/18 2:15 p.m.26 views

Design/Logic Flaw

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

4CVSS4.5AI score0.00857EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/18 2:15 p.m.6 views

CVE-2021-21626

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

4.3CVSS5.8AI score0.00857EPSS
SaveExploits0References3
CVE
CVE
added 2021/03/18 1:35 p.m.96 views

CVE-2021-21626

The CVE-2021-21626 issue affects the Jenkins Warnings Next Generation Plugin (versions

4.3CVSS4.7AI score0.00857EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2021/03/18 1:35 p.m.57 views

CVE-2021-21626

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

4.3CVSS4.9AI score0.00857EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
added 2021/03/18 12:00 a.m.11 views

Missing permission checks in warnings-ng allow listing workspace contents

warnings-ng 8.4.4 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. A sequence ...

4.3CVSS5.1AI score0.00857EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2021/03/18 12:00 a.m.5 views

PT-2021-14669 · Jenkins · Jenkins Warnings Next Generation Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Warnings Next Generation Plugin versions 8.4.4 and earlier Description: The issue allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns mat...

4.3CVSS4.3AI score0.00857EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2021/03/03 12:28 p.m.8 views

jenkins: Arbitrary file read vulnerability in workspace browsers

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...

6.5CVSS5.9AI score0.02226EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/03/03 4:19 a.m.8 views

jenkins: Arbitrary file read vulnerability in workspace browsers

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...

6.5CVSS5.9AI score0.02226EPSS
SaveExploits0References4
Citrix
Citrix
added 2021/03/03 12:00 a.m.12 views

Citrix Workspace App Assistance for Non-Admins

Clickhere to download Citrix Workspace App. You have been directed to this article because you have questions about or need assistance with Citrix Workspace app and you are NOT an administrator or technical contact for your organization. As a non-admin user of Citrix Workspace app, you must conta...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2021/02/23 7:36 p.m.189 views

IBM Squashes Critical Remote Code-Execution Flaw

IBM has patched a critical buffer-overflow error that affects Big Blue’s Integration Designer toolset, which helps enterprises create business processes that integrate applications and data. If exploited, the flaw could enable remote code execution. Click to Register The flaw CVE-2020-27221 has a...

7.5CVSS8.6AI score0.17611EPSS
SaveExploits0References15
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/22 4:30 p.m.34 views

Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities . These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 61. Vulnerability Details CVEID: CVE-2020-8201 DESCRIPTION: Node.js is vulnerable to...

7.8CVSS0.8AI score0.17611EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2021/02/22 12:00 a.m.16 views

IBM Planning Analytics 信息泄露漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. An information disclosure vulnerability exists in IBM Planning Analytics Workspace that allows a...

4.3CVSS5.9AI score0.01068EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/02/17 7:06 p.m.7 views

jenkins: Arbitrary file read vulnerability in workspace browsers

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...

6.5CVSS5.9AI score0.02226EPSS
SaveExploits0References4
Citrix
Citrix
added 2021/02/16 12:00 a.m.12 views

How to troubleshoot printing on Citrix Workspace app for Mac

How it all works Prerequisites and scope What is supported What is not supported External dependencies for printing Apple/HP...

7.2AI score
SaveExploits0
Hacker One
Hacker One
added 2021/02/13 3:32 p.m.23 views

Slack: Lack of URL normalization renders Blocked-Previews feature ineffectual

Slack has a feature known as Blocked Previewsblocked-previews, which allows Workspace Owners and Admins to specify a list of URLs for which no link preview should occur. The point of this feature is to reduce clutter and prevent harmful content from getting embedded in the workspace. However, whe...

0.7AI score
SaveExploits0
Citrix
Citrix
added 2021/02/12 12:00 a.m.7 views

Experiencing performance and disconnects while using Optimized Microsoft Teams with Citrix Workspace App for Windows 2102

Performance and stability issues being experienced when joining Microsoft Teams meetings while using Citrix Optimized Microsoft Teams with Citrix Workspace App for Windows 2102. The shared display content may be slow and user could potentially disconnect from the meeting. And Citrix Workspace App...

7.1AI score
SaveExploits0
OSV
OSV
added 2021/02/03 4:15 p.m.9 views

CVE-2021-25758

In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution...

7.8CVSS7.2AI score0.00964EPSS
SaveExploits0References2
Rows per page
Query Builder