Archive
7 April 2021
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Medium 4.3
Potential DoS through abuse of rate limit in libunity-webapps for Firefox
The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks unti…
-
Medium 4.3
Possible remote DOS in WebApps
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.0…
-
Medium 6.5
In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted …
-
Medium 4.3
CSRF vulnerability in Jenkins promoted builds Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.
-
Medium 4.3
View name validation bypass in Jenkins
Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.
-
Medium 4.3
Lack of type validation in agent related REST API in Jenkins
Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one …
-
Medium 6.7
Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in t…