2322 matches found
org.jenkins-ci.main:jenkins-test-harness (1.581), org.jenkins-ci.main:jenkins-war (1.581) +5 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.581)
org.jenkins-ci.main:jenkins-core MAVEN version 1.581 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.581 - org.jenkins-ci.main:jenkins-war 1.581 -...
Remote Code Execution (RCE)
com.liferay, com.liferay.object.service is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper restriction on the use of Groovy scripts in Object actions, which allows authenticated admin users with the Instance Administrator role to execute arbitrary Groovy scripts and...
CVE-2025-11158
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published by users, allowing insertion of arbitrary scripts and leading to a RCE...
EUVD-2025-208458
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published by users, allowing insertion of arbitrary scripts and leading to a RCE...
EUVD-2025-208457
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published by users, allowing insertion of arbitrary scripts and leading to a RCE...
CVE-2025-11158
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published by users, allowing insertion of arbitrary scripts and leading to a RCE...
Hitachi Vantara Pentaho Data Integration & Analytics security vulnerabilities
Hitachi Vantara Pentaho Data Integration & Analytics is a data integration and analysis system developed by Hitachi, Ltd. Versions of Hitachi Vantara Pentaho Data Integration & Analytics prior to 10.2.0.6, including 9.3.x and 8.3.x versions, have security vulnerabilities. These vulnerabilities st...
CVE-2025-11158: Missing Authorization
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published by users, allowing insertion of arbitrary scripts and leading to a RCE...
CVE-2025-11158 Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published by users, allowing insertion of arbitrary scripts and leading to a RCE...
CVE-2025-11158
Hitachi Vantara Pentaho Data Integration & Analytics is affected by CVE-2025-11158 in versions before 10.2.0.6, including 9.3.x and 8.3.x. The root cause is failure to restrict Groovy scripts in new PRPT reports published by users, allowing insertion of arbitrary scripts and leading to a remote c...
CVE-2025-11158
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published by users, allowing insertion of arbitrary scripts and leading to a RCE...
CVE-2025-11158 Hitachi Vantara Pentaho Data Integration & Analytics - Missing Authorization
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published by users, allowing insertion of arbitrary scripts and leading to a RCE...
PT-2026-24134
Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho Data Integration & Analytics versions prior to 10.2.0.6 Hitachi Vantara Pentaho Data Integration & Analytics versions 8.3.x Hitachi Vantara Pentaho Data Integration & Analytics versions 9.3.x Description The software do...
groovy (>=0.0.5, <=0.0.16) potentially affected by CVE-2026-28416 via gradio (5.19.0)
gradio PYPI version 5.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - groovy =0.0.5, =0.0.16 Source cves: CVE-2026-28416 Source advisory: OSV:GHSA-JMH7-G254-2CQ9...
groovy (>=0.0.5, <=0.0.16) potentially affected by CVE-2026-28415 via gradio (5.19.0)
gradio PYPI version 5.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - groovy =0.0.5, =0.0.16 Source cves: CVE-2026-28415 Source advisory: OSV:GHSA-PFJF-5GXR-995X...
groovy (>=0.0.5, <=0.0.16) potentially affected by CVE-2026-28414 via gradio (5.19.0)
gradio PYPI version 5.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - groovy =0.0.5, =0.0.16 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...
groovy (>=0.0.5, <=0.0.16) potentially affected by CVE-2026-28414 via gradio (5.19.0)
gradio PYPI version 5.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - groovy =0.0.5, =0.0.16 Source cves: CVE-2026-28414 Source advisory: OSV:PYSEC-2026-64...
groovy (>=0.0.5, <=0.0.16) potentially affected by CVE-2026-28416 via gradio (5.19.0)
gradio PYPI version 5.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - groovy =0.0.5, =0.0.16 Source cves: CVE-2026-28416 Source advisory: OSV:PYSEC-2026-66...
groovy (>=0.0.5, <=0.0.16) potentially affected by CVE-2026-28415 via gradio (5.19.0)
gradio PYPI version 5.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - groovy =0.0.5, =0.0.16 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...
