Skip to content
OpenAdvisories

Archive

28 February 2014

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium —

    Jenkins directory traversal vulnerability

    Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.

  • Medium —

    Jenkins cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."

  • Medium 5.9

    Schneider Electric Floating License Manager Unquoted Search Path or Element

    Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space cha…

  • Medium 6.8

    Schneider Electric OFS Stack Buffer Overflow

    Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors i…