Known Vulnerabilities for Script Security by Jenkins

Listed below are 10 of the newest known vulnerabilities associated with "Script Security" by "Jenkins".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-120515 json The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopr... Not Provided 2026-11-07 2026-11-07
CVE-2026-120421 json In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client windo... Not Provided 2026-11-04 2026-11-04
CVE-2026-113429 json Legacy (v1 to v3) Actions artifact uploads stored the request's `Content-Encoding` header unchecked in the column that is ser... Not Provided 2026-11-01 2026-11-06
CVE-2026-113108 json Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via ... Not Provided 2026-10-20 2026-11-03
CVE-2026-111089 json Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes some... Not Provided 2026-11-01 2026-11-06
CVE-2026-109331 json Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook... Not Provided 2026-10-12 2026-10-26
CVE-2026-109277 json ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file des... Not Provided 2026-10-12 2026-10-15
CVE-2026-109274 json ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass t... Not Provided 2026-10-12 2026-10-13
CVE-2026-107337 json The Malcolm kiosk Flask application exposes a POST /script_call/