15 matches found
GHSA-JJVC-V8GW-5255 Apache Linkis DataSource remote code execution vulnerability
In Apache Linkis = 1.8.0241. Or users upgrade Linkis to version 1.6.0...
Apache Linkis DataSource remote code execution vulnerability
In Apache Linkis = 1.8.0241. Or users upgrade Linkis to version 1.6.0...
CVE-2023-46801
In Apache Linkis = 1.8.0241. Or users upgrade Linkis to version 1.6.0...
CVE-2023-46801
In Apache Linkis = 1.8.0241. Or users upgrade Linkis to version 1.6.0...
CVE-2023-46801 Apache Linkis DataSource: DataSource Remote code execution vulnerability
In Apache Linkis = 1.8.0241. Or users upgrade Linkis to version 1.6.0...
CVE-2023-46801
Apache Linkis vulnerable to remote code execution in the DataSource MySQL handler for versions = 1.8.0_241 and/or upgrade Linkis to version 1.6.0. If upgrading is not immediately possible, validate and restrict JRMP usage and account privileges to reduce exposure. If exploitation details are not ...
Jenkins allows Execution of Code by Opening a JRMP Listener
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener...
jenkins: Remote code execution vulnerability in remoting module (SECURITY-232)
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener...
Jenkins RCE 2(CVE-2 0 1 6-0 7 8 8)analysis and use-vulnerability and early warning-the black bar safety net
Foreign security researchers Moritz Bechler in 2 months found a Jenkins remote command execution vulnerability the vulnerability without having to login you can use, that is, the CVE-2 0 1 6-0 7 8 8 is. The official announcement is such description of this vulnerability: A vulnerability in the...
Immunity Canvas: JENKINS_JRMP_DESERIALIZATION
Name| jenkinsjrmpdeserialization ---|--- CVE| CVE-2016-0788 Exploit Pack| CANVAS Description| jenkinsjrmpdeserialization Notes| CVE Name: CVE-2016-0788 VENDOR: Jenkins NOTES: Versions tested: Ubuntu Linux 14.04.3 Jenkins 1.598 - 6 / 7 / 8 Jenkins 1.649 - 7 / 8 Windows 7 Ultimate SP1 Jenkins 1.598...
CVE-2016-0788
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener...
Code injection
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener...
CVE-2016-0788
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener...
CVE-2016-0788
CVE-2016-0788 affects the Jenkins remoting module. The vulnerability allows remote code execution by an attacker who can open a JRMP listener, enabling arbitrary code execution on the Jenkins host. Affected software is Jenkins before version 1.650 and Jenkins LTS versions before 1.642.2. The impa...
Jenkins < 1.642.2 / 1.650 Java Object Deserialization RCE
The remote web server hosts a version of Jenkins or Jenkins Enterprise that is prior to 1.642.2 or 1.650. It is, therefore, affected by a Java deserialization vulnerability. An unauthenticated, remote attacker can exploit this, by deserializing specific java.rmi and sun.rmi objects, to start a JR...