Search Results (282 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2017-2602 1 Jenkins 1 Jenkins 2024-11-21 N/A
jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).
CVE-2016-7076 2 Redhat, Sudo Project 2 Enterprise Linux, Sudo 2024-11-21 N/A
sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.