Aktuelle Sicherheitslücken Nachrichten / Aktuelle Exploits - Aktuelle Reverse Engineering Informatik Nachrichten
logo
  1. Reverse Engineering >
  2. Sicherheitslücken

ArabicEnglishFrenchGermanGreekItalianJapaneseKoreanPersianPolishPortugueseRussianSpanishTurkishVietnamese

➤ Team Security Exploits News / Sichterheitslücken Nachrichten

Seite 11 von 1.970 Seiten (Bei Beitrag 990 - 1089)
194.937x Beiträge in dieser Kategorie

Auf Seite 10 zurück | Nächste 12 Seite | Letzte Seite

[ 6 ] [ 7 ] [ 8 ] [ 9 ] [ 10 ] [11] [ 12 ] [ 13 ] [ 14 ] [ 15 ] [ 16 ] [ 17 ] [ 18 ] [ 19 ] [ 20 ] [ 21 ]

➥ Low CVE-2020-2266: Jenkins Description column

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting... weiterlesen

➥ Low CVE-2020-2256: Jenkins Pipeline maven integration

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in... weiterlesen

➥ Low CVE-2020-2270: Jenkins Clearcase release

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in badge tooltip, resulting in a stored cross-site scripting (XSS)... weiterlesen

➥ Low CVE-2020-2269: Jenkins Chosen-views-tabbar

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
Jenkins chosen-views-tabbar Plugin 1.2 and earlier does not escape view names in the dropdown to select views, resulting in a stored cross-site scripting... weiterlesen

➥ Low CVE-2020-13301: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a stored XSS on the standalone vulnerability... weiterlesen

➥ Medium CVE-2020-13306: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service... weiterlesen

➥ Low CVE-2020-13310: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending... weiterlesen

➥ CVE-2020-24377

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-24374

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-24376

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-14509

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields.... weiterlesen

➥ CVE-2020-14513

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unverified length... weiterlesen

➥ CVE-2020-24373

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-20406

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused... weiterlesen

➥ CVE-2020-14515

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking... weiterlesen

➥ CVE-2020-16233

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-14519

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0... weiterlesen

➥ CVE-2020-14517

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime... weiterlesen

➥ Low CVE-2020-2257: Jenkins Validating string parameter

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS)... weiterlesen

➥ Low CVE-2020-2259: Jenkins Computer queue

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
Jenkins computer-queue-plugin Plugin 1.5 and earlier does not escape the agent name in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability... weiterlesen

➥ Low CVE-2020-2262: Jenkins Android lint

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability... weiterlesen

➥ Low CVE-2020-2264: Jenkins Custom job icon

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability... weiterlesen

➥ CVE-2020-25015

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was... weiterlesen

➥ CVE-2020-10748

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows an... weiterlesen

➥ CVE-2020-10715

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft a URL and inject arbitrary text... weiterlesen

➥ CVE-2020-13928

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that... weiterlesen

➥ Medium CVE-2020-13299: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The revocation feature was not revoking all session tokens and one... weiterlesen

➥ Medium CVE-2020-13289: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is... weiterlesen

➥ CVE-2020-6146

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of... weiterlesen

➥ CVE-2020-6781

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17.1 potentially allows to intercept... weiterlesen

➥ CVE-2020-1694

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some... weiterlesen

➥ CVE-2020-10718

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader... weiterlesen

➥ CVE-2020-13259

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauthenticated, remote attacker to conduct... weiterlesen

➥ CVE-2020-14348

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in... weiterlesen

➥ CVE-2020-25040

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different... weiterlesen

➥ CVE-2020-14306

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. This flaw allows an... weiterlesen

➥ CVE-2020-25039

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ Low CVE-2020-13316: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not validating a Deploy-Token and allowed a disabled repository... weiterlesen

➥ Qualcomm Snapdragon Auto up to SDX20 AVI Clip NULL Pointer Dereference denial of service

Exploits vom | Direktlink: vuldb.com   
Nachrichten Bewertung
A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon... weiterlesen

➥ Low CVE-2020-13317: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8, and 13.3.4. An insufficient check in the GraphQL api allowed a maintainer to... weiterlesen

➥ Low CVE-2020-13313: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. An unauthorized project maintainer could edit the subgroup badges... weiterlesen

➥ Low CVE-2020-13311: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser attack that prohibits anyone from... weiterlesen

➥ Medium CVE-2020-13312: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth endpoint was vulnerable to brute-force attacks through... weiterlesen

➥ Low CVE-2020-13287: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Project reporters and above could see confidential EPIC attached to... weiterlesen

➥ Medium CVE-2020-13300: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
... weiterlesen

➥ Medium CVE-2020-13318: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account... weiterlesen

➥ CVE-2020-3989

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue... weiterlesen

➥ CVE-2020-3990

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow... weiterlesen

➥ CVE-2020-3988

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component... weiterlesen

➥ CVE-2020-3986

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component... weiterlesen

➥ CVE-2020-3987

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component... weiterlesen

➥ CVE-2020-3980

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user... weiterlesen

➥ CVE-2020-7529

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574... weiterlesen

➥ CVE-2020-7528

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code... weiterlesen

➥ CVE-2020-4708

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
IBM Security Trusteer Pinpoint Detect 11.6.5 could disclose some information due to using a wildcard in the Access-Control-Allow-Origin header. IBM X-Force... weiterlesen

➥ CVE-2020-7531

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables... weiterlesen

➥ CVE-2020-4409

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim... weiterlesen

➥ CVE-2020-7532

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary... weiterlesen

➥ CVE-2020-7530

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to executable... weiterlesen

➥ CVE-2020-1748

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when... weiterlesen

➥ CVE-2020-10758

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server,... weiterlesen

➥ CVE-2014-10402

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via... weiterlesen

➥ Medium CVE-2020-13314: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Omniauth endpoint allowed a malicious user to submit content... weiterlesen

➥ Medium CVE-2020-13284: Gitlab Gitlab

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
... weiterlesen

➥ Medium CVE-2020-25276: Primekey Ejbca

Exploits vom | Direktlink: cxsecurity.com   
Nachrichten Bewertung
An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check... weiterlesen

➥ CVE-2020-2266

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting... weiterlesen

➥ CVE-2020-2261

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary... weiterlesen

➥ CVE-2020-14315

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling... weiterlesen

➥ CVE-2020-25412

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-14393

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an... weiterlesen

➥ CVE-2020-14382

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every... weiterlesen

➥ CVE-2020-25614

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV)... weiterlesen

➥ CVE-2020-24889

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent... weiterlesen

➥ CVE-2020-24891

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-10733

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in the directory... weiterlesen

➥ CVE-2020-1710

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-7733

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets... weiterlesen

➥ CVE-2020-2273

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A cross-site request forgery (CSRF) vulnerability in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers to connect to an attacker-specified URL... weiterlesen

➥ CVE-2020-2270

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in badge tooltip, resulting in a stored cross-site scripting (XSS)... weiterlesen

➥ CVE-2020-2268

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary... weiterlesen

➥ CVE-2020-2277

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-2275

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing... weiterlesen

➥ CVE-2020-2269

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins chosen-views-tabbar Plugin 1.2 and earlier does not escape view names in the dropdown to select views, resulting in a stored cross-site scripting... weiterlesen

➥ CVE-2020-2271

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Locked Files Report Plugin 1.6 and earlier does not escape locked files' names in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability... weiterlesen

➥ CVE-2020-2276

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Selection tasks Plugin 1.0 and earlier executes a user-specified program on the Jenkins controller, allowing attackers with Job/Configure permission... weiterlesen

➥ CVE-2020-2267

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A missing permission check in Jenkins MongoDB Plugin 1.3 and earlier allows attackers with Overall/Read permission to gain access to some metadata of any... weiterlesen

➥ CVE-2020-2278

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace... weiterlesen

➥ CVE-2020-2274

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins ElasTest Plugin 1.2.1 and earlier stores its server password unencrypted in its global configuration file on the Jenkins controller where it can... weiterlesen

➥ CVE-2020-2272

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified... weiterlesen

➥ CVE-2020-2253

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
... weiterlesen

➥ CVE-2020-2262

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability... weiterlesen

➥ CVE-2020-2264

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability... weiterlesen

➥ CVE-2020-2255

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified... weiterlesen

➥ CVE-2020-2254

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create... weiterlesen

➥ CVE-2020-2265

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored cross-site... weiterlesen

➥ CVE-2020-2259

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins computer-queue-plugin Plugin 1.5 and earlier does not escape the agent name in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability... weiterlesen

➥ CVE-2020-2260

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified... weiterlesen

➥ CVE-2020-2257

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS)... weiterlesen

➥ CVE-2020-2258

Exploits vom | Direktlink: web.nvd.nist.gov   
Nachrichten Bewertung
Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with... weiterlesen
Seite 11 von 1.970 Seiten (Bei Beitrag 990 - 1089)
194.937x Beiträge in dieser Kategorie

Auf Seite 10 zurück | Nächste 12 Seite | Letzte Seite

[ 6 ] [ 7 ] [ 8 ] [ 9 ] [ 10 ] [11] [ 12 ] [ 13 ] [ 14 ] [ 15 ] [ 16 ] [ 17 ] [ 18 ] [ 19 ] [ 20 ] [ 21 ]

RSS Feeds vom IT News Nachrichtenportal Team Security abonieren

27x RSS Feed Quellen
RSS Feed Unterkategorien von Team Security Exploits News / Sichterheitslücken Nachrichten: 2x
RSS Feed Kategorie von IT News Nachrichtenportal Team Security Exploits abonieren [Valid RSS]
Eigene RSS Feed Quelle hinzufügen [IT Security Webseite, Blog, sonstige Quelle]

RSS Reader Empfehlung

Benutze Feedly zum Abonieren von RSS Feeds . Folge uns auf feedly
Als weitere Online Plattform empfiehlt sich InnoReader RSS Online Web Reader
Es empfiehlt sich für Chrome Erweiterung "RSS-Abonnement" (von Google) oder für Firefox Addon / Erweiterung Awesome RSS


Suchen