2936 matches found
Jenkins Script Security Plugin <=1.49 - Sandbox Bypass
A sandbox bypass vulnerability exists in the Jenkins Script Security Plugin versions 1.49 and earlier within src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java. This flaw allows attackers with permission to submit sandboxed scripts to execute arbitrary code on th...
GO-2024-3280 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
GO-2024-3169 vulnerabilities
Vulnerabilities for packages: buildah...
EUVD-2026-57819
Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...
CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
CVE-2026-19135
Affected software: OpenNMS Meridian and Horizon. Vulnerability: A JEXL expression sandbox bypass exists in multiple versions, allowing a low-privileged authenticated user to submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the s...
CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
CVE-2026-19135 OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
EUVD-2026-57718
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
CVE-2026-47243 affecting package kata-containers for versions less than 3.32.0.kata0-1
CVE-2026-47243 affecting package kata-containers for versions less than 3.32.0.kata0-1. A patched version of the package is available...
CVE-2026-44210 affecting package kata-containers for versions less than 3.32.0.kata0-1
CVE-2026-44210 affecting package kata-containers for versions less than 3.32.0.kata0-1. An upgraded version of the package is available that resolves this issue...
K000162892: OpenJDK vulnerability CVE-2026-60526
Security Advisory Description Vulnerability in Oracle Java SE component: Installation. Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to...
CVE-2026-19144 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-73248
A flaw was found in calibre, an e-book manager. A remote attacker could craft a malicious e-book file such as EPUB, OPF, or PDF containing specially crafted metadata. When a user opens or imports this file, the application's processing of nested templates can bypass Python template restrictions,...
EUVD-2026-57066
The Intel ALH digital-audio-interface driver function daialhgetproperties in drivers/dai/intel/alh/alh.c used a caller-supplied int streamid with no range validation. The value indexes the fixed-size static const uint8t alhhandshakemap64 array and scales a FIFO register address, so an out-of-rang...
GHSA-QQJW-V6CG-96J4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-5WVW-HXFH-PCQR vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19160 vulnerabilities
Vulnerabilities for packages: chromium...