10436 matches found
CVE-2026-57653
CVE-2026-57653 describes a SQL Injection vulnerability in the WordPress plugin WP Job Portal (versions
WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by hhhai in WordPress Plugin WP Job Portal versions = 2.5.2...
CVE-2026-57653: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in WP Job Portal = 2.5.2 versions...
PT-2026-52823
Contributor SQL Injection in WP Job Portal = 2.5.2 versions...
EUVD-2026-31483
amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads...
amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads()
Summary Amazon Braket SDK is an open-source Python library for interacting with the Amazon Braket quantum computing service, including managing hybrid quantum jobs and retrieving job results. An issue exists where, under certain circumstances, a remote authenticated user with S3 write access to a...
Beware of “Parcel Expert” job offers: They’re parcel mule scams
A parcel mule scam, also called a reshipping scam, is a fake job offer designed to recruit people into handling stolen goods. It usually starts with a fake remote job offer that promises easy money for receiving, inspecting, repackaging, and forwarding packages from home. The “employer” may claim...
CVE-2026-53139
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Skip CSD when it has zeroed workgroups A compute shader dispatch encodes its workgroup counts in the CFG0..CFG2 registers. Kicking off a dispatch with a zero count in any of the three dimensions is invalid. First, the...
CVE-2026-53139
CVE-2026-53139 concerns the Linux kernel drm/v3d path where a compute shader dispatch with zeroed workgroup counts (CFG0..CFG2) could be mishandled; the fix ensures the indirect CSD job is not submitted when any dimension is zero, causing the dispatch to complete as a no-op. Connected sources sho...
CVE-2026-57283
A flaw was found in Jenkins Pipeline: Groovy Plugin. This cross-site request forgery CSRF vulnerability allows attackers to instantiate types related to job or system configuration. This could enable unauthorized modifications to the Jenkins environment...
GHSA-J4PH-WP3C-C37W Jenkins FitNesse Plugin stores passwords unencrypted
Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These passwords can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. As of publication of thi...
Jenkins FitNesse Plugin stores passwords unencrypted
Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These passwords can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. As of publication of thi...
Jenkins Priority Sorter Plugin has a CSRF vulnerability
Jenkins Priority Sorter Plugin 936.v2c01c6b84449 and earlier does not require POST requests in an HTTP endpoint that saves the global job priority configuration. This allows attackers to overwrite the global job priority configuration. Priority Sorter Plugin 936.937.v5581d0b2ccba requires POST...
Jenkins Job Configuration History Plugin doesn't redact encrypted values of secrets in job and agent configurations
Jenkins Job Configuration History Plugin 1356.ve360da6c523a and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations through its "View as XML" / "RAW" feature and its configuration diff views. This allows attackers with Item/Extended Read...
org.biouno:uno-choice (>=2.8.5, <=2.8.6), org.jenkins-ci.plugins:job-dsl (1.90) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1365.v4778ca_84b_de5)
org.jenkins-ci.plugins:script-security MAVEN version 1365.v4778ca84bde5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice =2.8.5, =2.8.6 - org.jenkins-ci.plugins:job-dsl...
org.biouno:uno-choice (>=2.8.5, <=2.8.6), org.jenkins-ci.plugins:job-dsl (1.90) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1365.v4778ca_84b_de5)
org.jenkins-ci.plugins:script-security MAVEN version 1365.v4778ca84bde5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice =2.8.5, =2.8.6 - org.jenkins-ci.plugins:job-dsl...
com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (>=61.v68b_d7264b_643, <=69.vc3f564093641), io.jenkins.plugins:pipeline-lib-oras (105.v0413172a_ec91) potentially affected by CVE-2026-57284 via io.jenkins.plugins:pipeline-groovy-lib (798.v5cc688825312)
io.jenkins.plugins:pipeline-groovy-lib MAVEN version 798.v5cc688825312 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down =61.v68bd7264b643...
com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (>=61.v68b_d7264b_643, <=69.vc3f564093641), io.jenkins.plugins:pipeline-lib-oras (105.v0413172a_ec91) potentially affected by CVE-2026-57283 via io.jenkins.plugins:pipeline-groovy-lib (798.v5cc688825312)
io.jenkins.plugins:pipeline-groovy-lib MAVEN version 798.v5cc688825312 is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down =61.v68bd7264b643...
com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (73.ve2b_957fc2921) potentially affected by CVE-2026-57284 via io.jenkins.plugins:pipeline-groovy-lib (805.va_fc79344957d)
io.jenkins.plugins:pipeline-groovy-lib MAVEN version 805.vafc79344957d is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down 73.ve2b957fc2921...
com.fuzzpro.jenkins-plugins:multibranch-job-tear-down (73.ve2b_957fc2921) potentially affected by CVE-2026-57283 via io.jenkins.plugins:pipeline-groovy-lib (805.va_fc79344957d)
io.jenkins.plugins:pipeline-groovy-lib MAVEN version 805.vafc79344957d is affected by a known vulnerability. The following packages have a transitive dependency on io.jenkins.plugins:pipeline-groovy-lib and may be impacted: - com.fuzzpro.jenkins-plugins:multibranch-job-tear-down 73.ve2b957fc2921...