Skip to content
Fencer Intel

All · maven

Newest first, late arrivals on top. Also a feed.

  1. 8.8
    CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets
    mavenbitnami
    1 public exploit EPSS 83.7% chance of exploitation in 30 days, percentile 99.6%
  2. 5.1
    CVE-2024-23639 micronaut-core management endpoints vulnerable to drive-by localhost attack
    maven
  3. 5.4
    CVE-2024-25148 Liferay Portal vulnerable to user impersonation
    maven
  4. 5.3
    CVE-2024-25146 Liferay Portal allows attackers to discover the existence of sites
    maven
  5. 4.1
    CVE-2024-25144 Liferay Portal denial-of-service vulnerability
    maven
  6. 5.4
    CVE-2023-47798 Liferay Portal's account lockout does not invalidate existing user sessions
    maven
  7. 8.8
    CVE-2024-24113 XXL-JOB vulnerable to Server-Side Request Forgery
    maven
  8. 8.8
    CVE-2024-24824 graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request
    maven
    EPSS 34.7% chance of exploitation in 30 days, percentile 98%
  9. 5.7
    CVE-2024-24823 graylog2-server Session Fixation vulnerability through cookie injection
    maven
  10. 9.6
    CVE-2024-25145 Liferay Portal stored cross-site scripting (XSS) vulnerability
    maven
  11. 6.5
    CVE-2024-25143 Liferay Portal denial of service (memory consumption)
    maven
  12. 5.3
    CVE-2023-39196 Apache Ozone: Missing mutual TLS authentication in one of the service internal Ozone Storage Container Manager endpoints
    maven
  13. 7.4
    CVE-2023-51437 Apache Pulsar: Timing attack in SASL token signature verification
    maven
  14. 8.5
    CVE-2024-23673 Apache Sling Servlets Resolver: Malicious code execution via path traversal
    maven
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  15. 4.1
    CVE-2023-34042 Spring Security's spring-security.xsd file is world writable
    Springmaven
  16. 8.8
    CVE-2024-22567 mingSoft MCMS File Upload vulnerability
    maven
    EPSS 17.8% chance of exploitation in 30 days, percentile 97%
  17. 6.1
    CVE-2024-23635 AntiSamy malicious input can provoke XSS when preserving comments
    maven
  18. 9.3
    CVE-2024-1143 Central Dogma Authentication Bypass Vulnerability via Session Leakage
    maven
  19. 9.8
    CVE-2024-22533 Beetl Server-Side Template Injection vulnerability
    maven
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  20. 3.3
    CVE-2024-22236 Spring Cloud Contract vulnerable to local information disclosure
    Springmaven
  21. 5.7
    CVE-2024-24565 CrateDB database has an arbitrary file read vulnerability
    maven
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  22. 9.8
    CVE-2023-51982 CrateDB authentication bypass vulnerability
    maven
  23. 7.5
    CVE-2023-29055 Apache Kylin: Insufficiently protected credentials in config file
    maven
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  24. 8.6
    CVE-2023-6267 Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.
    maven
  25. 5.4
    CVE-2024-23905 Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin
    maven
  26. 7.5
    CVE-2024-23904 Arbitrary file read vulnerability in Jenkins Log Command Plugin
    maven
  27. 5.3
    CVE-2024-23903 Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin
    maven
  28. 4.3
    CVE-2024-23902 CSRF vulnerability in Jenkins GitLab Branch Source Plugin
    maven
  29. 6.5
    CVE-2024-23901 Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin
    maven
  30. 4.3
    CVE-2024-23900 Path traversal vulnerability in Jenkins Matrix Project Plugin
    maven