Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 112

Export CSV
CVE-2022-32148

Exposure of client IP addresses in net/http

Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the X-Forwarded-For header.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Golang Redhat
Products
Go Acm Application Interconnect and 16 more
CVE-2022-1962

Stack exhaustion due to deeply nested types in go/parser

Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Golang Redhat
Products
Go Acm Application Interconnect and 13 more
CVE-2022-1705

Improper sanitization of Transfer-Encoding headers in net/http

Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Golang Redhat
Products
Go Acm Application Interconnect and 19 more
CVE-2023-2976

Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class. Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Google Redhat
Products
Guava Amq Broker Amq Streams and 7 more
CVE-2024-9453

Jenkins-image: sensitive data disclosure when using openshift jenkins image

A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if they have access to sensitive information.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Ocp Tools Openshift Developer Tools And Services
CVE-2024-23897

jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.

CVSS 3.1 · 9.8 Critical EPSS 100.0% KEV · Listed
Vendors
Jenkins Redhat
Products
Jenkins Ocp Tools
CVE-2024-34145

jenkins-plugin/script-security: sandbox bypass via sandbox-defined classes

A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Ocp Tools
CVE-2024-34144

jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies

A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1 · 9.8 Critical EPSS 48.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Ocp Tools
CVE-2024-52550

jenkins-plugin/workflow-cps: Lack of Approval Check for Rebuilt Jenkins Pipelines

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Groovy Pipeline\ Ocp Tools
CVE-2024-52549

jenkins-plugin/script-security: Jenkins Script Security Plugin File Disclosure Vulnerability

Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the controller file system.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Ocp Tools
CVE-2024-52551

jenkins-plugin/pipeline-model-definition: Jenkins Pipeline Declarative Plugin Allows Restart of Builds with Unapproved Jenkinsfile

Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Jenkins Jenkins Project Redhat
Products
Pipeline\ Jenkins Pipeline Declaratrive Plugin Ocp Tools
CVE-2025-1948

Eclipse Jetty HTTP clients can increase memory allocation

In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_HEADER_LIST_SIZE. The Jetty HTTP/2 server does not perform validation on this setting, and tries to allocate a ByteBuffer of the specified capacity to encode HTTP responses, likely resulting in OutOfMemoryError being thrown, or even the JVM process exiting.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Eclipse Redhat
Products
Jetty Apache Camel Spring Boot Ocp Tools
CVE-2024-23898

jenkins: cross-site WebSocket hijacking

Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller.

CVSS 3.1 · 8.8 High EPSS 67.2% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Ocp Tools
CVE-2024-38808

CVE-2024-38808: Spring Expression DoS Vulnerability

In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Specifically, an application is vulnerable when the following is true: * The application evaluates user-supplied SpEL expressions.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp Redhat Vmware
Products
Active Iq Unified Manager Oncommand Insight Apache Camel Spring Boot and 2 more
CVE-2022-1471

Remote Code execution in SnakeYAML

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.

CVSS 3.1 · 8.3 High EPSS 99.5% KEV · Not listed
Vendors
Redhat Snakeyaml Project
Products
Amq Clients Amq Streams Enterprise Linux and 11 more
CVE-2024-23900

jenkins-2-plugins: matrix-project plugin path traversal vulnerability

Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with Item/Configure permission to create or replace any config.xml files on the Jenkins controller file system with content not controllable by the attackers.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Matrix Project Ocp Tools
CVE-2024-23899

jenkins-2-plugins: git-server plugin arbitrary file read vulnerability

Jenkins Git server Plugin 99.va_0826a_b_cdfa_d and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing attackers with Overall/Read permission to read content from arbitrary files on the Jenkins controller file system.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Jenkins Redhat
Products
Git Server Ocp Tools
CVE-2022-40151

Stack Buffer Overflow in xstream

Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

CVSS 3.1 · 6.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Redhat Xstream
Products
Camel Quarkus Camel Spring Boot Jboss Enterprise Bpms Platform and 2 more
CVE-2022-40152

Stack Buffer Overflow in Woodstox

Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

CVSS 3.1 · 6.5 Medium EPSS 18.2% KEV · Not listed
Vendors
Fasterxml Redhat Xstream
Products
Woodstox Camel Quarkus Camel Spring Boot and 6 more
CVE-2022-41966

XStream Denial of Service via stack overflow

XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack uses the hash code implementation for collections and maps to force recursive hash calculation causing a stack overflow. This issue is patched in version 1.4.20 which handles the stack overflow and raises an InputManipulationException instead. A potential workaround for users who only use HashMap or HashSet and whose XML refers these only as default map or set, is to change the default implementation of java.util.Map and java.util per the code example in the referenced advisory. However, this implies that your application does not care about the implementation of the map and all elements are comparable.

CVSS 3.1 · 8.2 High EPSS 9.3% KEV · Not listed
Vendors
Redhat Xstream
Products
Camel Quarkus Camel Spring Boot Jboss Enterprise Bpms Platform and 7 more