au.com.versent.jenkins.plugins:ignore-committer-strategy (>=29.v7c3891a_434c3 <=57.v0756db_b_f6926), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (=0.0.1) +148 more potentially affected by CVE-2025-58458 via org.jenkins-ci.plugins:git-client (>=1.0.2 <=6.3.0)

org.jenkins-ci.plugins:git-client MAVEN version =1.0.2, =29.v7c3891a434c3, =1.0.5.0, =1.1.0, =1.9.2-beta, =1.9, =4.0.9, =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0, =1.1.2 and more Source cves: CVE-2025-58458 Source advisory: OSV:GHSA-G2PQ-9JR7-W6GV...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=55.v51410e712e0c <=57.v0756db_b_f6926), be.personify.iam:personify-frontend (>=1.5.4.RELEASE <=1.5.5.RELEASE) +1907 more potentially affected by CVE-2025-48976 via org.apache.commons:commons-fileupload2-core (>=2.0.0-M1 <=2.0.0-M3)

org.apache.commons:commons-fileupload2-core MAVEN version =2.0.0-M1, =55.v51410e712e0c, =1.5.4.RELEASE, =1.0.0, =0.0.15, =24.7.0, =24.7.0, =24.7.0, =24.7.0, =24.11.0, =24.7.0, =24.7.0, =24.7.0, =25.1.0, =3.0.1, =3.2.12 and more Source cves: CVE-2025-48976 Source advisory:...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=55.v51410e712e0c <=57.v0756db_b_f6926), be.personify.iam:personify-frontend (>=1.5.4.RELEASE <=1.5.5.RELEASE) +1907 more potentially affected by CVE-2025-48976 via org.apache.commons:commons-fileupload2-core (>=2.0.0-M1 <=2.0.0-M3)

org.apache.commons:commons-fileupload2-core MAVEN version =2.0.0-M1, =55.v51410e712e0c, =1.5.4.RELEASE, =1.0.0, =0.0.15, =24.7.0, =24.7.0, =24.7.0, =24.7.0, =24.11.0, =24.7.0, =24.7.0, =24.7.0, =25.1.0, =3.0.1, =3.2.12 and more Source cves: CVE-2025-48976 Source advisory: OSV:GHSA-VV7R-C36W-3PRJ...

CVE-2025-5114

A vulnerability has been found in easysoft zentaopms 21.520250307 and classified as critical. This vulnerability affects the function Edit of the file /index.php?m=editor&f=edit&filePath=cGhhcjovLy9ldGMvcGFzc3dk&action=edit of the component Committer. The manipulation of the argument filePath lea...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +2013 more potentially affected by CVE-2017-17383 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.9)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =0.45 and more Source cves: CVE-2017-17383 Source advisory: OSV:GHSA-X3RC-CXV7-6XP6...

CVE-2017-16895

The 1 arqupdater, 2 arqcommitter, 3 standardrestorer, 4 arqglacierrestorer, and 5 arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet...

cvs security problem

I found two security problems in cvs-1.10.8. 1 A committer can execute any binary in server using CVS/Checkin.prog or CVS/Update.prog. A committer can execute arbitrary binary on a cvs server using Checkin.prog. Usually CVS/Checkin.prog in a working directory is copied from CVSROOT/modules when t...

CVS Kit CVS Server 1.10.8 - Checkin.prog Binary Execution

CVS Kit CVS Server 1.10.8 - Checkin.prog Binary Execution source: https://www.securityfocus.com/bid/1524/info A CVS committer can execute arbitrary binaries by using Checkin.prog. Usually CVS/Checkin.prog in a working directory is copied from CVSROOT/modules when the directory is "checkout"ed and...