CVE-2019-1003000_RCE-DETECTION

CVE-2019-1003000RCE-DETECTION General Summary Chaining vulnerability CVE-2018-1000861 with CVE-2019-1003000, I created a module to test for a Pre-Auth RCE on Jenkins CI. Initially, I had tried to go about detecting the vulnerability with a username and password and job name; however, I thought it...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (0.20), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.23, <=0.24) +49 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.410)

org.jenkins-ci.main:jenkins-core MAVEN version 1.410 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins 0.20 -...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

org.jenkins-ci.main:jenkins-test-harness (1.401), org.jenkins-ci.main:jenkins-war (1.401) +7 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.401)

org.jenkins-ci.main:jenkins-core MAVEN version 1.401 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.401 - org.jenkins-ci.main:jenkins-war 1.401 -...

EUVD-2022-6289

Malicious code in bioql PyPI...

CVE-2019-10450

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

org.jenkins-ci.main:jenkins-test-harness (1.586), org.jenkins-ci.main:jenkins-war (1.586) +5 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.586)

org.jenkins-ci.main:jenkins-core MAVEN version 1.586 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.586 - org.jenkins-ci.main:jenkins-war 1.586 -...

org.jenkins-ci.main:jenkins-test-harness (1.592), org.jenkins-ci.main:jenkins-war (1.592) +2 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.592)

org.jenkins-ci.main:jenkins-core MAVEN version 1.592 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.592 - org.jenkins-ci.main:jenkins-war 1.592 -...

org.jenkins-ci.plugins:git-client (1.6.2), org.jenkins-ci.plugins:ssh-agent (>=1.4.1, <=1.4.2) +1 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.9.2)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git-client 1.6.2 - org.jenkins-ci.plugins:ssh-agent =1.4.1, =1.4.2 -...

Jenkins-CI Unauthenticated Script-Console Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'cgi' class MetasploitModule 'Jenkins-CI Unauthenticated Script-Console Scanner', 'Description' = %q This module scans for unauthenticated Jenkins-CI script...

Arbitrary Code Execution

org.jenkins-ci.plugins:script-security is vulnerable to Arbitrary Code Execution. The vulnerability is due to crafted constructor bodies that invoke other constructors which can then be used to construct any subclassable type via implicit casts, which bypasses the sandbox protection, resulting in...

org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...

Information Disclosure

org.jenkins-ci.plugins, cloudbees-folder is vulnerable to Information Disclosure. The vulnerability exists because the library does not properly restrict the organization folder log file location, which allows an attacker to gain access to sensitive information in the system...

org.jenkins-ci.main:jenkins-test-harness (1.422), org.jenkins-ci.main:jenkins-war (1.422) +3 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.422)

org.jenkins-ci.main:jenkins-core MAVEN version 1.422 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.422 - org.jenkins-ci.main:jenkins-war 1.422 -...

Information Disclosure

org.jenkins-ci.plugins:codedx is vulnerable to Information Disclosure. A remote authenticated attacker with item/read permissions is able to gain access user sensitive information such as the existence of an attacker-specified file path on an agent file system...

org.jenkins-ci.tests:plugins-compat-tester-cli (>=1201.vb_4f0b_b_63dd3b, <=1212.vde346b_7a_dc40) potentially affected by CVE-2023-27901 via org.jenkins-ci.main:jenkins-core (2.386)

org.jenkins-ci.main:jenkins-core MAVEN version 2.386 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.tests:plugins-compat-tester-cli =1201.vb4f0bb63dd3b, =1212.vde346b7adc40 Source...

org.jenkins-ci.main:jenkins-test-harness (1.505), org.jenkins-ci.main:jenkins-war (1.505) +6 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.505)

org.jenkins-ci.main:jenkins-core MAVEN version 1.505 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.505 - org.jenkins-ci.main:jenkins-war 1.505 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.5), org.jenkins-ci.main:jenkins-war (1.424.5) +3 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.424.5)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.5 - org.jenkins-ci.main:jenkins-war 1.424.5 -...

org.jenkins-ci.tests:plugins-compat-tester-cli (>=1201.vb_4f0b_b_63dd3b, <=1212.vde346b_7a_dc40) potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (2.386)

org.jenkins-ci.main:jenkins-core MAVEN version 2.386 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.tests:plugins-compat-tester-cli =1201.vb4f0bb63dd3b, =1212.vde346b7adc40 Source...

org.jenkins-ci.plugins:list-git-branches-parameter (>=0.0.7, <=0.0.11), org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.2.1.1) +1 more potentially affected by CVE-2022-36884 via org.jenkins-ci.plugins:git (3.9.3)

org.jenkins-ci.plugins:git MAVEN version 3.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:list-git-branches-parameter =0.0.7, =1.6, =0.9.8, =0.9.10 Source cves: CVE-2022-3688...