CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Jenkins Pipeline: Groovy Plugin Sandbox Bypass Remote Code Execution (CVE-2019-1003030)
[Affected Scope] Jenkins Pipeline: Groovy Plugin 2.63 and earlier
[Impact] Attackers with pipeline script control can bypass the Groovy sandbox to execute arbitrary code on the Jenkins master JVM
[Mitigation] Immediately upgrade Jenkins Pipeline: Groovy Plugin to version 2.64 or later
Oracle Java SE and OpenJDK 2D Graphics Sandbox Escape and Remote Code Execution Vulnerability (CVE-2013-2465)
[Affected Scope] Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, 5.0 Update 45 and earlier, and OpenJDK 7.
[Impact] Remote attackers can completely bypass the Java security sandbox and execute arbitrary code on the host system via malicious 2D image rendering.
[Mitigation] Immediately upgrade to Java SE 7u25 or later, apply OpenJDK security patches, and disable Java browser plugins.