CVE-2021-29921

CVE-2021-29921 affects the ipaddress module in Python, where leading zeros in IPv4 octets are mishandled, potentially bypassing IP-based access controls. The issue is addressed by Python 3.9.5 and later; many advisories (Debian, AlmaLinux, Alpine, etc.) reference updates or security trackers conf...

CVE-2022-22965

CVE-2022-22965 (Spring4Shell) affects Spring Framework’s Spring MVC and Spring WebFlux when data binding is enabled in apps running on JDK 9+, with exploitation requiring Tomcat as WAR deployment. The issue is not exploited in Spring Boot executable jars. Vulnerable configurations are associated ...

CVE-2022-22963

CVE-2022-22963 affects Spring Cloud Function: in versions 3.1.6, 3.2.2 and older unsupported releases, routing-expression using SpEL can be crafted by a user to trigger remote code execution and access local resources. The root cause is unsafe evaluation of SpEL within the HTTP request routing he...

CVE-2021-39144

CVE-2021-39144 refers to a remote code execution vulnerability in XStream, a Java library for XML serialization. When processed input streams are manipulated, an attacker with sufficient rights could execute arbitrary commands on the host. Public descriptions consistently note that XStream now us...

CVE-2021-36374

CVE-2021-36374 affects Apache Ant and causes denial of service via memory allocation when parsing specially crafted ZIP-based archives (and derived formats such as JARs and certain Office files). The vulnerability stems from how Ant reads these archives, enabling large memory use and out-of-memor...

CVE-2018-6356

Jenkins before 2.107 and Jenkins LTS before 2.89.4 fail to block relative paths that escape the plugin resource directory, allowing users with Overall/Read to download files from the Jenkins master. On Windows, any file accessible to the master could be downloaded; on other OSes, any file under t...

CVE-2021-39139

CVE-2021-39139 affects XStream, a Java XML serialization library. The vulnerability allows a remote attacker to load and execute arbitrary code by manipulating the processed input stream; exploitation depends on the affected XStream version and runtime behavior. Connected advisories confirm XStre...

CVE-2021-36090

CVE-2021-36090 affects Apache Commons Compress zip handling: reading a specially crafted ZIP can allocate excessive memory, causing an out-of-memory DoS. Supported details from IBM/AWS advisories point to a fix in Commons Compress (upgrade to 1.21+; e.g., Amazon Linux advisories list apache-commo...

CVE-2021-39152

CVE-2021-39152 concerns the XStream Java XML serialization library. The vulnerability allows a remote attacker to request data from internal resources not publicly available by manipulating the processed input stream, impacting systems using affected XStream versions when running Java runtimes ar...

CVE-2021-39151

CVE-2021-39151 is part of a family of vulnerabilities in XStream, a Java library used for XML serialization. The connected documents confirm that, in affected versions, an attacker can load and execute arbitrary code on a remote host by manipulating the processed input stream, with no user intera...

CVE-2017-1000353

Summary (CVE-2017-1000353, Jenkins) : An unauthenticated remote code execution vulnerability affects Jenkins up to version 2.56 and the 2.46.1 LTS line. The issue arises when a serialized Java SignedObject is sent to the Jenkins CLI, which is deserialized via a new ObjectInputStream, bypassing a ...

CVE-2021-39141

The CVE-2021-39141 entry concerns the XStream Java library, where an attacker can load and execute arbitrary code by manipulating the processed input stream. Affected versions permit code execution from a remote host; mitigation is to upgrade to XStream 1.4.18, which replaces a reliance on blackl...

CVE-2021-39150

XStream Java library (xstream) is affected by CVE-2021-39150. The flaw arises when processing the input stream, potentially allowing a remote attacker to access internal resources not publicly available. Affected description notes impact across Java runtimes from 14 to 8, and emphasizes that enab...

CVE-2021-39140

CVE-2021-39140 affects the XStream Java library. Connected sources describe a vulnerability in XStream up to version 1.4.18 that may allow a remote attacker to cause 100% CPU denial-of-service by manipulating the input stream; no user interaction required. Affected platforms reference upstream be...

CVE-2021-39145

The CVE-2021-39145 vulnerability affects the XStream Java library. In affected versions, a remote attacker can load and execute arbitrary code by manipulating the processed input stream. Public advisories reference XStream updates (e.g., Fedora, Debian, Amazon Linux 2) and indicate remediation th...

CVE-2021-39146

CVE-2021-39146 is an XStream deserialization vulnerability that has been addressed in multiple IBM advisories. The issue allows remote code execution via unsafe object deserialization in XStream across products that bundle the library (e.g., Atlas eDiscovery Process Management, ITNCM, IBM Spectru...

CVE-2021-39149

CVE-2021-39149 affects the XStream Java serialization library. The vulnerability permits a remote attacker to load and execute arbitrary code by manipulating the processed input stream. The issue is tied to XStream’s input handling and the move away from blacklist-based security (1.4.18), relying...

CVE-2021-39147

CVE-2021-39147 relates to XStream, a Java library for XML serialization. Publicly available documents confirm a remote code execution risk when processing input streams, with XStream 1.4.18 and related releases susceptible unless mitigations are applied. Connected sources describe the root cause ...

CVE-2021-39154

XStream (Java) vulnerability CVE-2021-39154: in affected XStream releases (e.g., 1.4.18) a remote attacker can load and execute arbitrary code by manipulating the input stream. Multiple advisories (Debian, Fedora, Amazon Linux 2 ALAS, etc.) reference the same CVE family and urge upgrading libxstr...

CVE-2021-39153

CVE-2021-39153 affects XStream Java library. In affected releases, a remote attacker could load and execute arbitrary code by manipulating the processed input stream, when using XStream out of the box with certain Java runtimes (Java 14 to 8) or with JavaFX installed. The issue is tied to input-p...

CVE-2021-35515

CVE-2021-35515 is an infinite-loop denial-of-service in Apache Commons Compress when reading a crafted 7Z archive. The issue arises during the construction of the codecs list used to decompress an entry, potentially consuming unbounded CPU and impacting services that rely on the sevenz package. C...

CVE-2021-39148

Summary: CVE-2021-39148 affects XStream, a Java XML-serialization library. Multiple connected advisories confirm a remote code-execution risk by manipulating the processed input stream, with the attacker able to load and execute arbitrary code from a remote host. The issue is tied to how XStream ...

CVE-2021-36373

CVE-2021-36373 is a denial-of-service in Apache Ant caused by reading a specially crafted TAR archive that can exhaust memory, leading to OOM during builds. The initial description notes that Ant versions affected include 1.9.16 and 1.10.11 and that a memory exhaustion can disrupt builds. Connect...

CVE-2019-10219

The CVE-2019-10219 entry affects Hibernate Validator: SafeHtml validator annotation fails to sanitize HTML comments/instructions, enabling XSS in affected code paths. Affected CP4S versions are 1.7.2.0, 1.8.0.0, and 1.8.1.0. Remediation is to upgrade to Cloud Pak for Security 1.9.0.0 per IBM guid...

CVE-2021-35516

CVE-2021-35516 affects Apache Commons Compress (the sevenz package). A specially crafted 7Z archive can cause the library to allocate excessive memory, ultimately causing an out-of-memory condition and a denial-of-service on services that use Compress’ sevenz component. The initial description do...

CVE-2021-43859

XStream Java library (versions before 1.4.19) is vulnerable to a remote DoS via crafted input streams that can cause 100% CPU, depending on CPU type/parallelism. The fix is upgrading to XStream 1.4.19, which monitors element-adding times and throws an exception when a threshold is exceeded; a NO_...

CVE-2022-20615

CVE-2022-20615 affects Jenkins Matrix Project Plugin (1.19 and earlier). It arises because HTML metacharacters in node/label names and label descriptions aren’t escaped, causing a stored XSS vulnerability exploitable by users with Agent/Configure permission. Remediation per the connected advisori...

CVE-2022-20612

CVE-2022-20612 is a CSRF vulnerability in Jenkins 2.329 and earlier, and in LTS 2.319.1 and earlier, allowing an attacker to trigger a build without parameters when no security realm is configured. The incident is documented in multiple advisories (e.g., RHSA entries for OpenShift platforms) whic...

CVE-2021-22145

CVE-2021-22145 affects Elasticsearch 7.10.0–7.13.3 in its error reporting, allowing memory disclosure where an attacker submitting malformed queries could cause error messages to include previously used data buffer contents (e.g., documents or authentication details). The issue is documented acro...

CVE-2021-22132

Elasticsearch 7.7.0–7.10.1 exposes an information-disclosure flaw in the async search API: executed async searches cause HTTP headers to be stored, potentially allowing a user who can read the .tasks index to obtain other users’ sensitive request headers. The issue is fixed in Elasticsearch 7.10....

CVE-2018-1999002

CVE-2018-1999002 is an arbitrary file read vulnerability in Jenkins prior to 2.133 (and 2.121.1 and earlier for some builds) via the Stapler web framework. The issue arises from how Stapler handles crafted HTTP requests, allowing an unauthenticated or low-privilege attacker to read files on the J...

CVE-2021-22144

CVE-2021-22144 affects Elasticsearch Grok parser. The vulnerability is an uncontrolled recursion that enables a DoS via specially crafted Grok queries submitted by an authenticated user, potentially crashing the node. Affected versions are Elasticsearch before 7.13.3 and 6.8.17. Public references...

CVE-2019-1003049

CVE-2019-1003049 affects Jenkins core where an incomplete fix for security advisory SECURITY-901 left remoting-based CLI authentication caches valid in Jenkins versions prior to 2.172 (and LTS prior to 2.164.2). Affected products/versions: Jenkins and LTS builds older than 2.172 and 2.164.2 respe...

CVE-2021-22134

Elasticsearch CVE-2021-22134 affects Elasticsearch versions after 7.6.0 and before 7.11.0 when using Document or Field Level Security. Get requests on recently updated (not yet refreshed) documents may bypass permissions, potentially disclosing the existence of restricted documents/fields. Mitiga...

CVE-2019-1003050

CVE-2019-1003050 affects Jenkins core UI: the f:validateButton form control did not properly escape job URLs, enabling a cross-site scripting (XSS) vulnerability. Vulnerable in Jenkins versions 2.171 and earlier and Jenkins LTS 2.164.1 and earlier; exploit requires a user with the ability to cont...

CVE-2019-10384

CVE-2019-10384 affects Jenkins 2.191 and earlier (and OpenShift/Jenkins packages on RHEL/CentOS) where CSRF tokens could be created without a valid session, allowing an anonymous user to bypass CSRF protection. Affected versions include the 2.191 and earlier line and the LH 2.176.2 and earlier LT...

CVE-2022-20613

CVE-2022-20613 is a CSRF vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier that allows an attacker to cause the Jenkins instance DNS to resolve an attacker-specified hostname. The connected documents confirm this CSRF issue but do not provide a patch version or specific miti...

CVE-2018-1999001

Jenkins prior to 2.133 (notably <= 2.132 and

CVE-2019-10383

CVE-2019-10383 is a stored XSS in Jenkins up to 2.191 (LTS up to 2.176.2) where an attacker with Overall/Administer permissions can abuse the update center URL to inject HTML/JavaScript in update center pages. Affected component is Jenkins update center handling; root cause is insufficient escapi...

CVE-2022-20614

CVE-2022-20614 affects Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier. The issue is a missing permission check that allows attackers with Overall/Read access to cause the Jenkins instance DNS to resolve an attacker‑specified hostname, potentially leaking information or enabling attacker‑c...

CVE-2018-1999003

CVE-2018-1999003 affects Jenkins versions up to 2.133 (and 2.132/2.121.1 and earlier) where the Queue.java path fails to enforce privileges. This allows attackers with Overall/Read permission to cancel queued builds. The issue is rooted in improper authorization logic for queue operations. Impact...

CVE-2018-1999007

CVE-2018-1999007 is a cross-site scripting vulnerability in Jenkins up to version 2.132 (and 2.121.1 and earlier for some components) involving the Stapler web framework. When Stapler debug mode is enabled, error/404 pages could display unescaped URL parts, allowing an attacker who can influence ...

CVE-2018-1999004

The connected sources confirm CVE-2018-1999004 is an improper authorization flaw in Jenkins prior to version 2.133 (and prior to 2.132/2.121.1 as cited by various records) affecting SlaveComputer.java, where users with Overall/Read permission can initiate agent launches and abort in-progress laun...

CVE-2018-1999005

CVE-2018-1999005 is a cross-site scripting vulnerability in Jenkins versions before 2.133 (and 2.121.1 and earlier) affecting BuildTimelineWidget.java and BuildTimelineWidget/control.jelly. Attackers with Job/Configure permission could inject JavaScript executed in another user’s browser during U...

CVE-2018-1000194

CVE-2018-1000194 describes a path traversal vulnerability in Jenkins pre-2.121/2.107.3 LTS due to flaws in FilePath.java and SoloFilePathFilter.java. The issue allows unauthenticated agents to read and write arbitrary files on the Jenkins master, bypassing the agent-to-master security subsystem p...

CVE-2018-1000195

The CVE-2018-1000195 issue affects Jenkins versions 2.120 and older (including LTS 2.107.2 and older). The vulnerability is a server-side request forgery in ZipExtractionInstaller.java that lets users with Overall/Read permission cause Jenkins to submit an HTTP GET request to an arbitrary URL and...

CVE-2018-1000068

CVE-2018-1000068 affects Jenkins core versions <= 2.106 and LTS

CVE-2018-1000067

CVE-2018-1000067 is a Jenkins SSRF/info-disclosure vulnerability affecting Jenkins versions 2.106 and earlier and LTS 2.89.3 and earlier. The issue arises from improper authorization that allows an attacker to trigger HTTP GET requests and view limited response data. Affected products and fixed v...

CVE-2018-1000192

CVE-2018-1000192 affects Jenkins 2.120 and older, and LTS 2.107.2 and older. The vulnerability exists in AboutJenkins.java and ListPluginsCommand.java, allowing users with Overall/Read access to enumerate all installed plugins. Exploitation details are not provided in the connected documents; no ...

CVE-2018-1000193

CVE-2018-1000193 is an improper neutralization of control sequences affecting Jenkins 2.120 and older (LTS 2.107.2 and older) in HudsonPrivateSecurityRealm.java. An attacker can sign up using usernames containing control characters that may appear to match other usernames and then be non-removabl...