52 matches found
org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.468)
org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...
org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.468)
org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...
org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.468)
org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...
CVE-2026-4564
A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Handler. Such manipulation of the argument invokeTarget leads to code injection. It is possible to launch the attack...
EUVD-2026-14341
A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Handler. Such manipulation of the argument invokeTarget leads to code injection. It is possible to launch the attack...
CVE-2026-4564
A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Handler. Such manipulation of the argument invokeTarget leads to code injection. It is possible to launch the attack...
Ruoyi Code Injection Vulnerability
Ruoyi is a backend management system developed by the RuoYi developer. Versions of RuoYi 4.8.2 and earlier had a code injection vulnerability. This vulnerability stemmed from improper handling of the invokeTarget parameter in the Quartz Job Handler component located in the file /monitor/job/...
CVE-2026-4564 yangzongzhuan RuoYi Quartz Job job code injection
A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Handler. Such manipulation of the argument invokeTarget leads to code injection. It is possible to launch the attack...
CVE-2026-4564 yangzongzhuan RuoYi Quartz Job job code injection
A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Handler. Such manipulation of the argument invokeTarget leads to code injection. It is possible to launch the attack...
CVE-2026-4564
A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Handler. Such manipulation of the argument invokeTarget leads to code injection. It is possible to launch the attack...
PT-2026-27036
Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi versions up to 4.8.2 Description A security issue exists in yangzongzhuan RuoYi, specifically within the Quartz Job Handler component. The issue involves code injection stemming from manipulation of the invokeTarget argumen...
org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.468)
org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...
org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.468)
org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...
CVE-2022-36886
A cross-site request forgery CSRF vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job...
org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2025-31720 via org.jenkins-ci.main:jenkins-core (1.468)
org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...
org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.468)
org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...
Jenkins External Monitor Job Type Plugin XML external entity vulnerability
Jenkins External Monitor Job Type Plugin 206.v9a94ff0b4a10 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers with Item/Build permission to have Jenkins parse a crafted HTTP request with XML data that uses external entities for extracti...
GHSA-G4C3-4F3V-84X8 Jenkins External Monitor Job Type Plugin XML external entity vulnerability
Jenkins External Monitor Job Type Plugin 206.v9a94ff0b4a10 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers with Item/Build permission to have Jenkins parse a crafted HTTP request with XML data that uses external entities for extracti...
CVE-2023-37942
The CVE-2023-37942 entry concerns Jenkins External Monitor Job Type Plugin, specifically 206.v9a_94ff0b_4a_10 and earlier. The root cause is that the XML parser was not configured to prevent XML External Entity (XXE) attacks. Impact as described: an attacker with Item/Build permission can supply ...
