Jmeter-CVE-2018-1297-

Vulnerabilidad de ejecución de comandos por deserialización RMI en Jmeter CVE-2018-1297 Apache JMeter es un conjunto de software de código abierto escrito en Java por la American Apache Software Foundation para pruebas de estrés y rendimiento. Las versiones 2.x y 3.x tienen una vulnerabilidad de...

cve-2022-42889-jmeter

CVE 2022-42889 This script is for removing the older version of Apache Commons Text 1.9 and replaces it with the newer version 1.10.0 in JMETERHOME/lib folder...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, ruby3.4-jrjackson, apache-polaris, confluent-kafka, apache-pulsar-fips, floci, airbyte-platform-fips, apache-hop, wazuh-indexer, flyway, zipkin, ruby3.2-jrjackson, logstash, camunda, confluent-kafka-jre-bcfips, kafbat-ui, thingsboard,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, ruby3.4-jrjackson, apache-polaris, confluent-kafka, apache-pulsar-fips, floci, airbyte-platform-fips, apache-hop, wazuh-indexer, flyway, zipkin, ruby3.2-jrjackson, logstash, camunda, confluent-kafka-jre-bcfips, kafbat-ui, thingsboard,...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, ruby3.4-jrjackson, apache-polaris, confluent-kafka, apache-pulsar-fips, floci, airbyte-platform-fips, apache-hop, wazuh-indexer, flyway, zipkin, ruby3.2-jrjackson, logstash, camunda, confluent-kafka-jre-bcfips, kafbat-ui, thingsboard,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, ruby3.4-jrjackson, apache-polaris, confluent-kafka, apache-pulsar-fips, floci, airbyte-platform-fips, apache-hop, wazuh-indexer, flyway, zipkin, ruby3.2-jrjackson, logstash, camunda, confluent-kafka-jre-bcfips, kafbat-ui, thingsboard,...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, ruby3.4-jrjackson, apache-polaris, confluent-kafka, apache-pulsar-fips, floci, airbyte-platform-fips, apache-hop, wazuh-indexer, flyway, zipkin, ruby3.2-jrjackson, logstash, camunda, confluent-kafka-jre-bcfips, kafbat-ui, thingsboard,...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, ruby3.4-jrjackson, apache-polaris, confluent-kafka, apache-pulsar-fips, floci, airbyte-platform-fips, apache-hop, wazuh-indexer, flyway, zipkin, ruby3.2-jrjackson, logstash, camunda, confluent-kafka-jre-bcfips, kafbat-ui, thingsboard,...

CVE-2023-25573

metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in /api/jmeter/download/files, which allows any user to download any file without authentication. This issue may expose all files available to the running process. This...

EUVD-2019-0394

Malware in sbrugna...

EUVD-2022-4306

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-1297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using Distributed Test only RMI based, Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngi...

Linux Distros Unpatched Vulnerability : CVE-2019-0187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unauthenticated RCE is possible when JMeter is used in distributed mode -r or -R command line options. Attacker can establish a RMI connection to a jmeter-serve...

Linux Distros Unpatched Vulnerability : CVE-2018-1287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache JMeter 2.X and 3.X, when using Distributed Test only RMI based, jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get...

VulnCheck KEV: CVE-2023-25573

metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in /api/jmeter/download/files, which allows any user to download any file without authentication. This issue may expose all files available to the running process. This...

CVE-2023-25573

Metersphere contains an improper access control vulnerability: unauthenticated users can download arbitrary files via /api/jmeter/download/files, exposing sensitive data. Affected versions include those prior to the fixes, with remediation in versions 1.20.20 lts and 2.7.1. The issue stems from i...

CVE-2023-25573: Missing Authorization

metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in /api/jmeter/download/files, which allows any user to download any file without authentication. This issue may expose all files available to the running process. This...

MeterSphere 安全漏洞

MeterSphere is MeterSphere open source one-stop open source continuous testing platform. MeterSphere versions before 1.20.20 lts and 2.7.1 have a security vulnerability that stems from incorrect access control in the file /api/jmeter/download/files, which can be exploited by an attacker to downlo...

K89010078: Apache vulnerabilities CVE-2018-1307, CVE-2018-1298, CVE-2018-1299, CVE-2018-1287, and CVE-2018-1297

Security Advisory Description CVE-2018-1307 In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and...

GHSA-7V85-6HV2-RWGW Missing certificate validation in Apache JMeter

When using Distributed Test only RMI based, Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...