cve-2022-42889-jmeter

CVE 2022-42889 This script is for removing the older version of Apache Commons Text 1.9 and replaces it with the newer version 1.10.0 in JMETERHOME/lib folder...

Jmeter-CVE-2018-1297-

Jmeter RMI Deserialization Command Execution Vulnerability CVE-2018-1297 Apache JMeter is an open-source software suite written in Java by the American Apache Software Foundation for stress testing and performance testing. Versions 2.x and 3.x contain a deserialization vulnerability that allows a...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: apache-pulsar, zookeeper-fips, datahub-gms, apache-polaris-fips, kates, cassandra, request-9047-keycloak-fips, ruby3.4-jrjackson, kafka-fips, kates-fips, drain-cleaner-fips, elasticsearch, flink-kubernetes-operator-fips, reposilite, ruby4.0-jrjackson, akhq, conductor...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: apache-pulsar, zookeeper-fips, datahub-gms, apache-polaris-fips, kates, cassandra, request-9047-keycloak-fips, ruby3.4-jrjackson, kafka-fips, kates-fips, drain-cleaner-fips, elasticsearch, flink-kubernetes-operator-fips, reposilite, ruby4.0-jrjackson, akhq, conductor...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: apache-pulsar, zookeeper-fips, datahub-gms, apache-polaris-fips, kates, cassandra, request-9047-keycloak-fips, ruby3.4-jrjackson, kafka-fips, kates-fips, drain-cleaner-fips, elasticsearch, flink-kubernetes-operator-fips, reposilite, ruby4.0-jrjackson, akhq, conductor...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: apache-pulsar, zookeeper-fips, datahub-gms, apache-polaris-fips, kates, cassandra, request-9047-keycloak-fips, ruby3.4-jrjackson, kafka-fips, kates-fips, drain-cleaner-fips, elasticsearch, flink-kubernetes-operator-fips, reposilite, ruby4.0-jrjackson, akhq, conductor...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: apache-pulsar, zookeeper-fips, datahub-gms, apache-polaris-fips, kates, cassandra, request-9047-keycloak-fips, ruby3.4-jrjackson, kafka-fips, kates-fips, drain-cleaner-fips, elasticsearch, flink-kubernetes-operator-fips, reposilite, ruby4.0-jrjackson, akhq, conductor...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: apache-pulsar, zookeeper-fips, datahub-gms, apache-polaris-fips, kates, cassandra, request-9047-keycloak-fips, ruby3.4-jrjackson, kafka-fips, kates-fips, drain-cleaner-fips, elasticsearch, flink-kubernetes-operator-fips, reposilite, ruby4.0-jrjackson, akhq, conductor...

com.artipie:debian-adapter (>=v0.30.15, <=v1.17.13), com.artipie:rpm-adapter (>=v0.30.15, <=v1.17.13) +2 more potentially affected by CVE-2026-59640 via org.bouncycastle:bcpg-lts8on (>=2.73.2, <=2.73.6)

org.bouncycastle:bcpg-lts8on MAVEN version =2.73.2, =v0.30.15, =v0.30.15, =2.1.9, =2.1.10 Source cves: CVE-2026-59640 Source advisory: MEND:CVE-2026-59640...

Apache JMeter Dashboard Login Panel - Detect

Detects the Apache JMeter Dashboard web UI distinct title and assets. !/usr/bin/env python3 -- coding: utf-8 -- """Apache JMeter Dashboard login panel detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Apache...

de.codecentric:jmeter-graph-maven-plugin (0.1.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.3)

org.springframework:spring-jms MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - de.codecentric:jmeter-graph-maven-plugin 0.1.0 Source cves: CVE-2026-41855 Source advisory:...

com.netas.jmeter:com.netas.jmeter.gradle.plugin (>=1.0.0-2.13, <=1.0.3-2.13), gradle.plugin.com.netas.jmeter:jmeter-gradle-plugin (>=1.0.0-2.13, <=1.0.3-2.13) +98 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6)

org.springframework:spring-jms MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.netas.jmeter:com.netas.jmeter.gradle.plugin =1.0.0-2.13, =1.0.0-2.13, =1.0.5-2.13, =1.1.3, =0.1...

cloud.testload:jmeter-clickhouse-listener (2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (0.0.1) +99 more potentially affected by CVE-2026-28208 via com.github.junrar:junrar (2.0.0)

com.github.junrar:junrar MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - cloud.testload:jmeter-clickhouse-listener 2.00 - com.bobpaulin.jmeter:aws-include-controller-plugin 0.0.1 -...

CVE-2023-25573

metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in /api/jmeter/download/files, which allows any user to download any file without authentication. This issue may expose all files available to the running process. This...

EUVD-2019-0394

Malware in sbrugna...

EUVD-2022-4306

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-1297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using Distributed Test only RMI based, Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngi...

Linux Distros Unpatched Vulnerability : CVE-2019-0187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unauthenticated RCE is possible when JMeter is used in distributed mode -r or -R command line options. Attacker can establish a RMI connection to a jmeter-serve...

Linux Distros Unpatched Vulnerability : CVE-2018-1287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache JMeter 2.X and 3.X, when using Distributed Test only RMI based, jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get...

com.deepoove:poi-tl (0.0.3), com.github.kulya:jmeter-gradle-plugin (1.3.4-2.12) +25 more potentially affected by CVE-2025-31672 via org.apache.poi:poi-ooxml (3.11-beta2)

org.apache.poi:poi-ooxml MAVEN version 3.11-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi-ooxml and may be impacted: - com.deepoove:poi-tl 0.0.3 - com.github.kulya:jmeter-gradle-plugin 1.3.4-2.12 -...