NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
87618  CVE-2017-1000362  The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINS_HOME with a new key. It also created a backup directory with all old secrets, and the key used to encrypt them. These backups were world-readable and not removed afterwards. Jenkins now deletes the backup directory, if present. Upgrading from before 1.498 will no longer create a backup directory. Administrators relying on file access permissions in their manually created backups are advised to check them for the directory $JENKINS_HOME/jenkins.security.RekeySecretAdminMonitor/backups, and delete it if present.          2017-07-18  2017-07-17  View
87874  CVE-2017-1207  IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777.          2017-07-18  2017-07-06  View
88130  CVE-2017-8420  SWFTools 2013-04-09-1007 on Windows has a Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x0000000000003e71 issue. This issue can be triggered by a malformed TTF file that is mishandled by font2swf. Attackers could exploit this issue for DoS (Access Violation).    4.3  Medium  2017-07-18  2017-07-13  View
65859  CVE-2005-0079  Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session.    4.6  Medium  2017-07-18  2017-07-10  View
66115  CVE-2005-0352  Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under the help menu, which allows local users to gain privileges.    7.2  High  2017-07-18  2017-07-10  View

Page 376 of 17672, showing 5 records out of 88360 total, starting on record 1876, ending on 1880

Actions