| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
| url |
VCID-93xk-hds8-abde |
| vulnerability_id |
VCID-93xk-hds8-abde |
| summary |
The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-3493
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-93xk-hds8-abde |
|
| 4 |
|
| 5 |
| url |
VCID-bcj2-fcpf-zkgm |
| vulnerability_id |
VCID-bcj2-fcpf-zkgm |
| summary |
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-3491
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bcj2-fcpf-zkgm |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
| url |
VCID-gxrq-4kmm-uufh |
| vulnerability_id |
VCID-gxrq-4kmm-uufh |
| summary |
The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-3492
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gxrq-4kmm-uufh |
|
| 12 |
| url |
VCID-hx86-64zz-8bds |
| vulnerability_id |
VCID-hx86-64zz-8bds |
| summary |
Jenkins Cross-Site Request Forgery vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code or (2) initiate deployment of binaries to a Maven repository via unspecified vectors. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-2034, GHSA-fg4r-f9j2-36mw
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hx86-64zz-8bds |
|
| 13 |
| url |
VCID-hxhy-qrkz-fkf5 |
| vulnerability_id |
VCID-hxhy-qrkz-fkf5 |
| summary |
Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS, and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this is might be the same vulnerability as CVE-2013-1463. If so, it is likely that CVE-2013-1463 will be REJECTed. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-1808
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hxhy-qrkz-fkf5 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
| url |
VCID-x2kn-aegv-9ya6 |
| vulnerability_id |
VCID-x2kn-aegv-9ya6 |
| summary |
openshift-origin-node Improper Input Validation vulnerability
Ruby gem openshift-origin-node before 2014-02-14 does not
contain a cronjob timeout which could result in a denial of
service in cron.daily and cron.weekly. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2014-0084, GHSA-756m-3qf2-hp58
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-x2kn-aegv-9ya6 |
|
| 20 |
| url |
VCID-ypzt-j5gh-ruhz |
| vulnerability_id |
VCID-ypzt-j5gh-ruhz |
| summary |
Improper Authentication
The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-4446, GHSA-mrgh-6x42-x6xf
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ypzt-j5gh-ruhz |
|
| 21 |
|