10125 matches found
Jenkins Pipeline 操作系统命令注入漏洞
Jenkins Pipeline is a set of plug-ins that support the implementation and integration of continuous delivery pipelines into Jenkins. Jenkins Pipeline has a security vulnerability that can be exploited by an attacker to invoke arbitrary OS commands on the controller by crafting SCM content...
PT-2022-17112 · Jenkins · Jenkins Pipeline: Groovy Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Groovy Plugin versions 2648.va9433432b33c and earlier Jenkins Pipeline: Groovy Plugin prior to 2656.vf7a e7b 75a 457 Jenkins Pipeline: Groovy Plugin version 2.94.1 Jenkins Pipeline: Groovy Plugin version 2.92.1 Description:...
CVE-2022-25175
CVE-2022-25175 affects Jenkins Pipeline: Multibranch Plugin (up to 706.vd43c65dec013 and older) where readTrusted uses the same checkout directories for distinct SCMs. This enables attackers with Item/Configure permission to invoke arbitrary OS commands on the controller via crafted SCM contents....
Jenkins Pipeline 操作系统命令注入漏洞
Jenkins Pipeline is a set of plug-ins that support the implementation and integration of continuous delivery pipelines into Jenkins. Jenkins Pipeline has a security vulnerability that can be exploited by an attacker to invoke arbitrary OS commands on the controller by crafting SCM content...
CVE-2022-25175
Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents...
CVE-2022-0557
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0557
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0557
CVE-2022-0557 describes an OS Command Injection in the Packagist Microweber/Microweber package prior to version 1.2.11. Public advisories and exploits indicate an authenticated remote code execution path via uploaded content or crafted inputs that bypass input validation, enabling an attacker to ...
CVE-2022-0557 OS Command Injection in microweber/microweber
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0557 OS Command Injection in microweber/microweber
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
OS Command Injection in install-package
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
GHSA-H9V8-RM3M-5H5F OS Command Injection in git-add-remote
git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...
Withdrawn Advisory: OS Command Injection in effect
Withdrawn Advisory This advisory has been withdrawn because the npm package effect, for which alerts were issued, does not correspond with https://github.com/Javascipt/effect, the repository with the vulnerable code. https://github.com/Javascipt/effect is not in any supported ecosystem...
GHSA-PF8J-VHG8-XMC3 karma-mojo enables OS Command Injection
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
GHSA-C5HM-XC74-PQRG OS Command Injection in jscover
jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument...
OS Command Injection and Command Injection in kill-port-process
The kill-port-process package prior to version 2.2.0 is vulnerable to a Command Injection...
jenkins-2-plugins/docker-commons: does not sanitize the name of an image or a tag which could result in an OS command execution
An OS command execution vulnerability was found in the Jenkins Docker Commons plugin. Due to a lack of sanitization in the name of an image or a tag, an attacker with Item/Configure permission or the ability to control the contents of a previously configured job’s SCM repository may be able to...
RHEL 8 : OpenShift Container Platform 4.9.19 (RHSA-2022:0339)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0339 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...
Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL OS Command Injection Vulnerability
Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL are both 4G/4.5G, WiFi and Vpn technology based mobile network routers from Ricon Mobile Canada.Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL are vulnerable to OS command injection, which can be exploited by...