jenkins: Remote code execution vulnerability due to unsafe deserialization in Jenkins remoting (SECURITY-218)

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-.jar file and the "Groovy variant in 'ysoserial'"...

SUSE-SU-2016:0242-1 Security update for jakarta-commons-collections

This update to jakarta-commons-collections 3.2.2 fixes the following security issues: bsc954102 code-execution by unserialization...

SUSE-SU-2016:0228-1 Security update for apache-commons-collections

This update to apache-commons-collections 3.2.2 fixes the following security issues: bsc954102: code execution by unserialization...

PT-2016-7909

Name of the Vulnerable Software and Affected Versions apache-commons-collections versions prior to 3.2.2 Description The issue allows for code execution by unserialization. Recommendations For versions prior to 3.2.2, update to version 3.2.2 to resolve the issue...

PT-2016-7910

Name of the Vulnerable Software and Affected Versions jakarta-commons-collections version 3.2.2 Description The issue allows for code-execution by unserialization. Recommendations For jakarta-commons-collections version 3.2.2, update to a version that fixes the security issues...

Oracle WebLogic Portal Apache Commons File Upload (January 2016 CPU)

Binary data oracleweblogicportalcpujan2016.nbin...

SOL63443590 - Apache Commons FileUpload vulnerability CVE-2013-2186

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

Oracle WebLogic Server Multiple Vulnerabilities (January 2016 CPU)

Binary data oracleweblogicservercpujan2016.nbin...

Critical: Red Hat Security Advisory: Red Hat JBoss Operations Network 3.1.2 Hotfix 11 update

An update for Red Hat JBoss Operations Network 3.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

apache-commons-collections: InvokerTransformer code execution during deserialisation

It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections...

MGASA-2016-0012 Updated apache-commons-collections packages fix security vulnerability

It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections...

Updated apache-commons-collections packages fix security vulnerability

It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections...

Mageia: Security Advisory (MGASA-2016-0012)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : JBoss EAP (RHSA-2015:2540)

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.5 and fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Critical security impact. Common...

CVE-2015-8765

Intel McAfee ePolicy Orchestrator ePO 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

Code injection

Intel McAfee ePolicy Orchestrator ePO 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

CVE-2015-8765

Intel McAfee ePolicy Orchestrator ePO 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

CVE-2015-8765

CVE-2015-8765 affects Intel McAfee ePolicy Orchestrator (ePO) with remote code execution via crafted serialized Java objects in the Apache Commons Collections library. Affected versions include ePO 4.6.9 and earlier; 5.0.x; 5.1.x before 5.1.3 Hotfix 1106041; and 5.3.x before 5.3.1 Hotfix 1106041....

CVE-2015-8765: Undefined Security Weakness

Intel McAfee ePolicy Orchestrator ePO 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

PT-2016-4007

Name of the Vulnerable Software and Affected Versions Intel McAfee ePolicy Orchestrator ePO versions 4.6.9 and earlier Intel McAfee ePolicy Orchestrator ePO versions 5.0.x Intel McAfee ePolicy Orchestrator ePO versions 5.1.x before 5.1.3 Hotfix 1106041 Intel McAfee ePolicy Orchestrator ePO versio...