org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2163 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2105 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2020-2103 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

Cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin

A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system...

Jenkins WebSphere Deployer Plugin missing permission check

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to perform connection tests, determine whether files with an attacker-specified path exist on the Jenkins controller file system...

org.wildfly.core:wildfly-core-dist (3.0.0.beta23), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta23) +6 more potentially affected by CVE-2019-14838 via org.wildfly.core:wildfly-host-controller (3.0.0.beta23)

org.wildfly.core:wildfly-host-controller MAVEN version 3.0.0.beta23 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-host-controller and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta23 -...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m4) +2 more potentially affected by CVE-2019-12407 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m4 Source cves: CVE-2019-12407 Source advisory: GHSA-P2R4-RPJ8-M2P9...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2019-10383 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2019-10354 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2019-10352 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

new packages: realtime-tests

An update is available for realtime-tests. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Lin...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2016-3722 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2017-1000356 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.sonarsource.dotnet:sonar-dotnet-tests-library (>=6.6.0.3969, <=7.9.1.7622), org.sonarsource.sonarqube:sonar-ce (6.5) +11 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.5)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.dotnet:sonar-dotnet-tests-library =6.6.0.3969, =7.9.1.7622 -...

org.apache.tomee:arquillian-tomee-jaxrs-tests (>=7.0.0-m1, <=7.0.4), org.apache.tomee:tomee-plume-webapp (>=7.0.0-m1, <=7.0.4) +1 more potentially affected by CVE-2018-8031 via org.apache.tomee:tomee-webapp (>=7.0.0-m1, <=7.0.4)

org.apache.tomee:tomee-webapp MAVEN version =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.4 Source cves: CVE-2018-8031 Source advisory: OSV:GHSA-FG44-W3FR-HGXV...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2016-0714 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2016-0714 Source advisory: OSV:GHSA-MV42-PX54-87JW...

org.wildfly.core:wildfly-core-dist (2.1.0.cr2), org.wildfly.core:wildfly-core-feature-pack (2.1.0.cr2) +14 more potentially affected by CVE-2018-10862 via org.wildfly.core:wildfly-server (2.1.0.cr2)

org.wildfly.core:wildfly-server MAVEN version 2.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 2.1.0.cr2 - org.wildfly.core:wildfly-core-feature-pack...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2018-1999045 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2018-1999042 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2018-1000170 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...