Filter
Software
Gradle EnterpriseIn Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installati…
9.8
First published (updated )
Gradle Build Cache NodeIn Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential…
9.8
First published (updated )
Gradle GradleThe HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the co…
9.8
First published (updated )
Gradle EnterpriseIn Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an …
9.8
First published (updated )
Gradle GradleObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a craf…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Gradle GradleThis is a collision attack on long IDs (64bits) for PGP keys. Users of dependency verification in G…
9.8
First published (updated )
Gradle EnterpriseGradle Enterprise before 2022.1 allows remote code execution if the installation process did not spe…
9.8
First published (updated )
Gradle EnterpriseIn Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymo…
9.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Gradle GradleLocal privilege escalation through system temporary directory
8.8
First published (updated )
Gradle GradleArbitrary code execution via specially crafted environment variables
8.5
First published (updated )
Gradle GradleIn Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary uns…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Gradle GradleRepository content filters do not work in Settings pluginManagement
8
First published (updated )
Gradle MavenAn issue was discovered in the Maven Extension plugin before 1.6 for Gradle Enterprise. The extensio…
7.8
First published (updated )
Gradle Build ActionGradle Build Action data written to GitHub Actions Cache may expose secrets
7.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Gradle EnterpriseAn issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise…
7.5
First published (updated )
Gradle GradleDependency verification bypass in Gradle
7.5
First published (updated )
Gradle GradleGradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosu…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Gradle EnterpriseAn access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers…
7.5
First published (updated )
Gradle EnterpriseA credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 thro…
7.5
First published (updated )
Gradle Gradle EnterpriseGradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.