org.jvnet.hudson.main:hudson-war (1.192), org.jvnet.hudson.plugins:javanet (1.1) +1 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.192)

org.jvnet.hudson.main:hudson-core MAVEN version 1.192 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.192 - org.jvnet.hudson.plugins:javanet 1.1 -...

org.jvnet.hudson.main:hudson-war (1.180), org.jvnet.hudson.plugins:plugin (1.180) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.180)

org.jvnet.hudson.main:hudson-core MAVEN version 1.180 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.180 - org.jvnet.hudson.plugins:plugin 1.180 Source cves:...

org.jvnet.hudson.main:hudson-war (1.116) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.116)

org.jvnet.hudson.main:hudson-core MAVEN version 1.116 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.116 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-test-harness (1.308), org.jvnet.hudson.main:hudson-war (1.308) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.308)

org.jvnet.hudson.main:hudson-core MAVEN version 1.308 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.308 - org.jvnet.hudson.main:hudson-war 1.308 -...

com.sonyericsson.hudson.plugins.gerrit:build-config (1.2.1), com.sonyericsson.hudson.plugins.gerrit:gerrit-events (1.2.0) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.369)

org.jvnet.hudson.main:hudson-core MAVEN version 1.369 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:build-config 1.2.1 -...

org.jvnet.hudson.main:hudson-test-harness (1.267), org.jvnet.hudson.main:hudson-war (1.267) +1 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.267)

org.jvnet.hudson.main:hudson-core MAVEN version 1.267 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.267 - org.jvnet.hudson.main:hudson-war 1.267 -...

org.jvnet.hudson.main:hudson-war (1.242), org.jvnet.hudson.plugins:plugin (1.242) +2 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.242)

org.jvnet.hudson.main:hudson-core MAVEN version 1.242 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.242 - org.jvnet.hudson.plugins:plugin 1.242 -...

org.jvnet.hudson.main:hudson-test-harness (1.291), org.jvnet.hudson.main:hudson-war (1.291) +2 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.291)

org.jvnet.hudson.main:hudson-core MAVEN version 1.291 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.291 - org.jvnet.hudson.main:hudson-war 1.291 -...

org.jvnet.hudson.main:hudson-test-harness (1.357), org.jvnet.hudson.main:hudson-war (1.357) +8 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.357)

org.jvnet.hudson.main:hudson-core MAVEN version 1.357 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.357 - org.jvnet.hudson.main:hudson-war 1.357 -...

PT-2022-7839

Name of the Vulnerable Software and Affected Versions Hudson versions prior to 3.3.2 Description The issue allows XXE XML External Entity attacks, which can provide access to potentially sensitive information on the filesystem of the Hudson master server. This is due to a flaw in the XML API...

WordPress Download Monitor plugin <= 4.5.9 - Authenticated Arbitrary File Download vulnerability

Authenticated Arbitrary File Download vulnerability discovered by Thiago Martins, Jorge Buzeti, Leandro Inacio, Lucas de Souza, Matheus Oliveira, Filipe Baptistella, Leonardo Paiva, Jose Thomaz, Joao Maciel, Vinicius Pereira, Geovanni Campos, Hudson Nowak, Guilherme Acerbi in WordPress Download...

GHSA-CXQW-VJCR-GP5G Excessive memory allocation in graph URLs leads to denial of service in Jenkins

Jenkins renders several different graphs for features like agent and label usage statistics, memory usage, or various plugin-provided statistics. Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit the graph size provided as query parameters. This allows attackers to request or to...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (0.20), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.23, <=0.24) +49 more potentially affected by CVE-2021-21602 via org.jenkins-ci.main:jenkins-core (1.410)

org.jenkins-ci.main:jenkins-core MAVEN version 1.410 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins 0.20 -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (0.20), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.23, <=0.24) +49 more potentially affected by CVE-2020-2102 via org.jenkins-ci.main:jenkins-core (1.410)

org.jenkins-ci.main:jenkins-core MAVEN version 1.410 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins 0.20 -...

GHSA-37WM-28RM-56VW Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation

The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name...

Jenkins cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."...

com.thalesgroup.dtkit:dtkit-metrics-hudson-api (>=0.14, <=0.14.1), com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.11, <=0.14) +29 more potentially affected by CVE-2017-1000355 via org.jenkins-ci.main:jenkins-core (1.397)

org.jenkins-ci.main:jenkins-core MAVEN version 1.397 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-metrics-hudson-api =0.14, =0.11, =1.5, =1.15, =0.3, =0.5.11 -...

GHSA-RR6R-P7RW-369C Session Fixation in Jenkins

A session fixation vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that prevented Jenkins from invalidating the existing session and creating a new one when a user signed up for a new user account...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2018-1000409 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...