Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified cr ...
Continue Reading
February 15, 2023
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute ar ...
Continue Reading
February 15, 2023
SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversary with authenticated account access to edit the default configuration, enabling ...
Continue Reading
February 15, 2023
Libpeconv â access violation, before commit b076013 (30/11/2022).Read More ...
Continue Reading
February 15, 2023
Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.Read More ...
Continue Reading
February 15, 2023
Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing K ...
Continue Reading
February 15, 2023
A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.Read More ...
Continue Reading
February 15, 2023
Butterfly Button plugin may leave traces of its use on user's device. Since it is used for reporting domestic problems, this may lead to spouse knowing about its use.Read More ...
Continue Reading
February 15, 2023
Back to Main
