NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
87618 | CVE-2017-1000362 | The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINS_HOME with a new key. It also created a backup directory with all old secrets, and the key used to encrypt them. These backups were world-readable and not removed afterwards. Jenkins now deletes the backup directory, if present. Upgrading from before 1.498 will no longer create a backup directory. Administrators relying on file access permissions in their manually created backups are advised to check them for the directory $JENKINS_HOME/jenkins.security.RekeySecretAdminMonitor/backups, and delete it if present. | 2017-07-18 | 2017-07-17 | View | ||||
87874 | CVE-2017-1207 | IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777. | 2017-07-18 | 2017-07-06 | View | ||||
88130 | CVE-2017-8420 | SWFTools 2013-04-09-1007 on Windows has a Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x0000000000003e71 issue. This issue can be triggered by a malformed TTF file that is mishandled by font2swf. Attackers could exploit this issue for DoS (Access Violation). | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-13 | View | |
65859 | CVE-2005-0079 | Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session. | 2 | 4.6 | Medium | 2017-07-18 | 2017-07-10 | View | |
66115 | CVE-2005-0352 | Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under the help menu, which allows local users to gain privileges. | 2 | 7.2 | High | 2017-07-18 | 2017-07-10 | View |
Page 376 of 17672, showing 5 records out of 88360 total, starting on record 1876, ending on 1880