İçeriğe atla
Noroxi

gradle kayıtları

gradle üreticisine ait 50 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%28
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

50 kayıt
  • CVE-2016-6199
    40Planlayın

    ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.

    KritikCVSS 9,8İstismar yokEPSS %4

    gradle · gradle7 Şub 2017

  • CVE-2019-15052
    40Planlayın

    The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host.

    KritikCVSS 9,8İstismar yokEPSS %2

    gradle · gradle14 Ağu 2019

  • CVE-2021-41589
    40Planlayın

    In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code executi

    KritikCVSS 9,8İstismar yokEPSS %2

    gradle · build cache node27 Eki 2021

  • CVE-2022-27919
    40Planlayın

    Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file.

    KritikCVSS 9,8İstismar yokEPSS %1

    gradle · enterprise25 Mar 2022

  • CVE-2019-11402
    39İzleyin

    In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format.

    KritikCVSS 9,8İstismar yokEPSS %1

    gradle · enterprise22 Nis 2019

  • CVE-2019-11403
    39İzleyin

    In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the

    KritikCVSS 9,8İstismar yokEPSS %1

    gradle · build cache node22 Nis 2019

  • CVE-2023-26053
    39İzleyin

    Gradle usage of long IDs for PGP keys opens potential for collision attacks

    KritikCVSS 9,8İstismar yokEPSS %0

    gradle · gradle2 Mar 2023

  • CVE-2023-49238
    39İzleyin

    In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) b

    KritikCVSS 9,8İstismar yokEPSS %0

    gradle · enterprise8 Oca 2024

  • CVE-2020-15776
    36İzleyin

    An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4.

    YüksekCVSS 8,8İstismar yokEPSS %2

    gradle · enterprise18 Eyl 2020

  • CVE-2026-22816
    34İzleyin

    Gradle fails to disable repositories which can expose builds to malicious artifacts

    YüksekCVSS 8,6İstismar yokEPSS %0

    gradle · gradle16 Oca 2026

  • CVE-2026-22865
    34İzleyin

    Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts

    YüksekCVSS 8,6İstismar yokEPSS %0

    gradle · gradle16 Oca 2026

  • CVE-2026-25063
    33İzleyin

    gradle-completion has a Bash command injection issue

    YüksekCVSS 8,3İstismar yokEPSS %0

    gradle · gradle-completion29 Oca 2026

  • CVE-2020-11979
    32İzleyin

    As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was al

    YüksekCVSS 7,5İstismar yokEPSS %8

    apache · ant1 Eki 2020

  • CVE-2022-25364
    32İzleyin

    In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access.

    YüksekCVSS 8,1İstismar yokEPSS %1

    gradle · enterprise17 Mar 2022

  • CVE-2021-41588
    32İzleyin

    In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects.

    YüksekCVSS 8,1İstismar yokEPSS %0

    gradle · gradle24 Eyl 2021

  • CVE-2023-35947
    32İzleyin

    Path traversal vulnerabilities in handling of Tar archives in Gradle

    YüksekCVSS 8,1İstismar yokEPSS %0

    gradle · gradle30 Haz 2023

  • CVE-2021-32751
    31İzleyin

    Arbitrary code execution via specially crafted environment variables

    YüksekCVSS 7,5İstismar yokEPSS %2

    gradle · gradle20 Tem 2021

  • CVE-2020-15768
    31İzleyin

    An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2.

    YüksekCVSS 7,5İstismar yokEPSS %1

    gradle · enterprise18 Eyl 2020

  • CVE-2020-15777
    31İzleyin

    An issue was discovered in the Maven Extension plugin before 1.6 for Gradle Enterprise.

    YüksekCVSS 7,8İstismar yokEPSS %1

    gradle · maven25 Ağu 2020

  • CVE-2021-29428
    31İzleyin

    Local privilege escalation through system temporary directory

    YüksekCVSS 7,8İstismar yokEPSS %0

    gradle · gradle13 Nis 2021

  • CVE-2022-23630
    30İzleyin

    Dependency verification bypass in Gradle

    YüksekCVSS 7,5İstismar yokEPSS %1

    gradle · gradle10 Şub 2022

  • CVE-2021-41584
    30İzleyin

    Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configura

    YüksekCVSS 7,5İstismar yokEPSS %1

    gradle · gradle23 Eyl 2021

  • CVE-2020-15775
    30İzleyin

    An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4.

    YüksekCVSS 7,5İstismar yokEPSS %1

    gradle · enterprise18 Eyl 2020

  • CVE-2020-15771
    30İzleyin

    An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1.

    YüksekCVSS 7,5İstismar yokEPSS %1

    gradle · enterprise18 Eyl 2020

  • CVE-2021-41587
    30İzleyin

    In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover credentials for other re

    YüksekCVSS 7,5İstismar yokEPSS %0

    gradle · gradle24 Eyl 2021