1487060 matches found
TOCTOU race condition in script-security
script-security allows Groovy scripts to load classpath entries from JAR files, specified either by file path or by URL, which administrators must approve before any script is allowed to use them. script-security 1415.v9af9b3ac253d and earlier downloads a JAR file specified by URL twice when a...
Sandbox bypass vulnerability in script-security
script-security provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. Groovy coerces a value to an interface by creating a proxy that forwards each interface method call to a method of the same name on that value...
Sandbox bypass vulnerability in script-security
script-security provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. script-security 1415.v9af9b3ac253d and earlier does not intercept operations performed on a null receiver method calls, property and attribute...
Sandbox bypass vulnerability in script-security
script-security provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. Groovy allows an existing class to be extended at runtime with additional methods. script-security 1415.v9af9b3ac253d and earlier does not check...
PT-2026-94034
Name of the Vulnerable Software and Affected Versions BC Security Empire versions prior to 6.7.1 Description Authenticated operators can write files to arbitrary paths on the C2 server because the software fails to validate the multipart filename parameter in upload endpoints. By using path...
Linux Distros Unpatched Vulnerability : CVE-2026-92078
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
Fedora 45 : python-django6 (2026-522a9411e7)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-522a9411e7 advisory. Update python-django6 providing python3-django to the latest 6.1.1 release Tenable has extracted the preceding description block directly from the...
Sandbox bypass vulnerability in script-security
script-security provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. Groovy casts a collection to another type using the elements of that collection, either passing them to a constructor of that type or casting eac...
CVE-2026-92129: Protection Mechanism Failure
Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier does not check calls from sandboxed scripts to methods added dynamically to a class at runtime, allowing attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute...
PT-2026-93767
Name of the Vulnerable Software and Affected Versions Jenkins Script Security Plugin versions prior to 1415.v9a f9b 3a c253d Description An issue exists where the plugin incorrectly validates operations performed by Groovy when a sandboxed script casts a collection to another type. Because the ca...
The vulnerability of the Security component of the Oracle Agile PLM application, which allows a hacker to gain full control over the application
The vulnerability of Oracle Agile PLM’s Security component is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...
SUSE CVE-2026-92061
Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
SUSE CVE-2026-92078
Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
django-DefectDojo v3.3.100
DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...
CLSA-2026-1789513129 TuxCare security update for io.netty (4 CVEs)
TuxCare rebuilt 38 io.netty packages to address 4 CVEs. Fixed in 4.1.43.Final-tuxcare.1...
GHSA-2H44-8472-FRJJ
creationtimestamp| type| source ---|---|--- 2026-09-15 22:54:25+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mvlprda2mw2w...
CVE-2026-61559
creationtimestamp| type| source ---|---|--- 2026-09-15 22:35:01+00:00| published-proof-of-concept| https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-2h44-8472-frjj 2026-09-15 22:54:24+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mvlprcfb7g2w 2026-09-16...
CVE-2026-91728
An integer overflow flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556715288...