| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-8944 | 4.0 | An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files. | 2022-07-27 16:42:00 | 2019-02-20 03:29:00 |
| CVE-2018-18850 | 9.0 | In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission to modify deployment processes could upload a maliciously crafted YAML configuration, potentially allowing for remote execution of arbitrary code, runn | 2022-07-27 16:40:00 | 2018-10-31 03:29:00 |
| CVE-2020-14836 | 6.8 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple prot | 2022-07-27 16:07:00 | 2020-10-21 15:15:00 |
| CVE-2020-14830 | 6.8 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple prot | 2022-07-27 16:07:00 | 2020-10-21 15:15:00 |
| CVE-2018-12089 | 3.5 | In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Service Fabric Cluster target is configured in Azure Active Directory security mode and a deployment is executed w | 2022-07-27 15:40:00 | 2018-06-11 10:29:00 |
| CVE-2018-11320 | 5.0 | In Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do not have sensitive values obfuscated in the deployment logs. | 2022-07-27 15:40:00 | 2018-05-21 14:29:00 |
| CVE-2017-11348 | 6.3 | In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files. This is a directory traversa | 2022-07-27 15:36:00 | 2017-07-17 13:18:00 |
| CVE-2022-24692 | 5.4 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The new menu option within the general Parameters page is vulnerable to stored XSS. The attacker can create a menu option, make it visible to every application user, and conduct session | 2022-07-27 15:15:00 | 2022-07-18 13:15:00 |
| CVE-2020-14179 | 5.0 | Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint. The af | 2022-07-27 15:05:00 | 2020-09-21 01:15:00 |
| CVE-2019-20419 | 4.4 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. The affected versions are before version 8.5.5, and from version 8.6.0 before 8.7.2. | 2022-07-27 14:48:00 | 2020-07-03 02:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: