https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 21:00:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04793 bdu:2022-04793 https://cve.radiocsirt.org/vuln/bdu:2022-04793 https://cve.radiocsirt.org/vuln/cnvd-2019-24406 cnvd-2019-24406 https://cve.radiocsirt.org/vuln/cnvd-2019-24406 https://cve.radiocsirt.org/vuln/euvd-2026-256260 EUVD-2026-256260 https://cve.radiocsirt.org/vuln/euvd-2026-256260 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000861 <p>A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.</p> <p>A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000861 https://cve.radiocsirt.org/vuln/ghsa-hhpm-5cp2-hg4x <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.</p> https://cve.radiocsirt.org/vuln/ghsa-hhpm-5cp2-hg4x https://cve.radiocsirt.org/vuln/gsd-2018-1000861 gsd-2018-1000861 https://cve.radiocsirt.org/vuln/gsd-2018-1000861 https://cve.radiocsirt.org/vuln/rhba-2019:0024 <p>jenkins: code execution through crafted URLs (SECURITY-595) jenkins: workspace browser allowed accessing files outside the workspace (SECURITY-904) jenkins: forced migration of user records (SECURITY-1072) jenkins: potential denial of service through cron expression form validation (SECURITY-1193)</p> <p>jenkins: code execution through crafted URLs (SECURITY-595) jenkins: workspace browser allowed accessing files outside the workspace (SECURITY-904) jenkins: forced migration of user records (SECURITY-1072) jenkins: potential denial of service through cron expression form validation (SECURITY-1193)</p> https://cve.radiocsirt.org/vuln/rhba-2019:0024