All CVEs — page 643 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
The flaw allows attackers with Overall/Administer permissions to automatically approve classpath entries, enabling them to execute arbitrary code in the Jenkins controller JVM.
The flaw allows attackers to execute arbitrary code outside the sandbox by exploiting @Builder annotations, posing a significant security risk.
The flaw allows attackers to run arbitrary AST transformations, bypassing sandbox protection and executing arbitrary code in the Jenkins controller JVM.
The flaw allows attackers to bypass sandbox protection in Jenkins Script Security Plugin, enabling execution of arbitrary code in the Jenkins controller JVM.
The flaw allows attackers to bypass sandbox protection by performing operations on a null receiver, enabling the execution of arbitrary code in the Jenkins controller JVM.
The flaw allows attackers to bypass sandbox protection in Jenkins Script Security Plugin by coercing a value to an interface, executing arbitrary code in the Jenkins controller JVM. This is significant because it undermines the security measures intended to protect against unauthorized code execution.
The flaw is a stack overflow vulnerability during the unauthenticated login process, allowing attackers to execute arbitrary code with root privileges. This is critical because it provides a powerful attack vector for remote code execution without authentication.