Archive
1 October 2019
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —
An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The …
-
Unscored —
Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable
-
Unscored —
Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.
-
Unscored —
Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights …
-
Unscored —
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by p…
-
Unscored —
Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for…
-
High 7.5
Apache MINA SSLFilter security Issue
Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1…
-
Unscored —
JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionalit…
-
Unscored —
An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could get access to potentiall…
-
Unscored —
emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&t…
-
Unscored —
An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area.
-
Unscored —
A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository…
-
Unscored —
PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on th…
-
Unscored —
PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected …
-
Unscored —
JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.
-
Unscored —
An issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for some external https co…
-
Critical 9.8
jackson-databind polymorphic typing issue
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the …
-
Critical 9.8
Polymorphic Typing in FasterXML jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in…
-
Unscored —
JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file.
-
Unscored —
In JetBrains Hub versions earlier than 2018.4.11436, there was no option to force a user to change the password and no …
-
Unscored —
JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox bro…
-
Unscored —
An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some security-related HTTP he…
-
Unscored —
The JetBrains Vim plugin before version 0.52 was storing individual project data in the global vim_settings.xml file. T…
-
Unscored —
Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalo…
-
Unscored —
In Snowtide PDFxStream before 3.7.1 (for Java), a crafted PDF file can trigger an extremely long running computation be…
-
Medium 5.4
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site…
-
Medium 5.4
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site…
-
Medium 5.4
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site…
-
Low 3.7
IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in f…
-
High 8.1
Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl
A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2018-1000873, CVE-2019-12086 reported for FasterXML jackso…
-
Low 3.5
CSV Injection in usage report downloaded from Pivotal Application Manager
Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and versions 670.0.x prior to 670.0.7, contain a vulnerability where a remote authenti…
-
High 7.5
Jenkins SourceGear Vault plugin transmits credentials in plain text
Jenkins SourceGear Vault Plugin transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.
-
Low 3.3
DingTalk Plugin stores credentials in plain text
Jenkins Dingding[钉钉] Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
-
Low —
Jenkins LDAP Email Plugin shows plain text password in configuration form
Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
-
Critical 9.9
Improper Control of Generation of Code in Jenkins Script Security Plugin
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
-
Medium 5.4
Jenkins HTML Publisher Plugin vulnerable to Cross-site Scripting
Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those.
-
Unscored —
JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles.
-
Unscored —
JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http c…
-
Unscored —
An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed i…
-
Unscored —
ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce…