Skip to content
Fencer Intel

All · maven

Newest first, late arrivals on top. Also a feed.

  1. 2.6
    CVE-2025-0148 Zoom Jenkins Marketplace plugin - Missing Password Field Masking
    maven
  2. 6.0
    CVE-2025-24961 Insecure path traversal in filesystem and filesystem-nio2 storage backends in org.gaul S3Proxy
    maven
  3. 9.3
    CVE-2025-23215 PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
    maven
  4. 4.3
    CVE-2025-0142 Zoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information
    maven
  5. —
    GHSA-vpxm-cr3r-pjp9 General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches
    maven
  6. 6.5
    CVE-2025-23367 Org.wildfly.core:wildfly-server: wildfly improper rbac permission
    mavenbitnami
  7. 9.8
    CVE-2025-0851 Path traversal issue in Deep Java Library
    maven
    EPSS 26.4% chance of exploitation in 30 days, percentile 98%
  8. 4.4
    CVE-2025-24790 Snowflake JDBC uses insecure temporary credential cache file permissions
    maven
  9. 7.8
    CVE-2025-24789 Snowflake JDBC allows an untrusted search path on Windows
    maven
  10. 4.9
    CVE-2024-57439 RuoYi vulnerable to Denial of Service by attackers with admin privileges
    maven
  11. 5.4
    CVE-2024-57438 RuoYi has insecure permissions
    maven
  12. 7.2
    CVE-2024-57436 RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring
    maven
  13. 5.5
    CVE-2024-29869 Apache Hive: Credentials file created with non restrictive permissions
    maven
  14. 5.5
    CVE-2025-0736 Org.infinispan-infinispan-parent: exposure of sensitive information in application logs
    maven
  15. 6.5
    CVE-2024-23953 Apache Hive: Timing Attack Against Signature in LLAP util
    maven
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  16. 7.5
    CVE-2025-24783 Apache Cocoon: continuations may not be private
    maven
  17. 5.4
    CVE-2025-24814 Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files
    mavenbitnami
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  18. 5.4
    CVE-2024-52012 Apache Solr: Configset upload on Windows allows arbitrary path write-access
    mavenbitnami
    EPSS 47.1% chance of exploitation in 30 days, percentile 98%
  19. 4.2
    CVE-2025-24363 The HL7 FHIR IG publisher may potentially expose GitHub repo user and credential information
    maven
  20. 8.6
    CVE-2024-52807 XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher`
    maven
  21. 6.5
    CVE-2024-53299 Apache Wicket: An attacker can intentionally trigger a memory leak
    maven
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  22. 4.3
    CVE-2025-24403 Missing permission checks in Jenkins Azure Service Fabric Plugin
    maven
  23. 4.3
    CVE-2025-24402 CSRF vulnerability in Jenkins Azure Service Fabric Plugin
    maven
  24. 6.8
    CVE-2025-24401 Disabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin
    maven
  25. 4.3
    CVE-2025-24400 Cache confusion in Jenkins Eiffel Broadcaster Plugin
    maven
  26. 8.8
    CVE-2025-24399 Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
    maven
  27. 8.8
    CVE-2025-24398 Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL
    maven
  28. 4.3
    CVE-2025-24397 Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
    maven
  29. 5.4
    CVE-2025-0604 Keycloak-ldap-federation: authentication bypass due to missing ldap bind after password reset in keycloak
    maven
  30. 5.4
    CVE-2024-56923 Cross site scripting in Silverpeas Core
    maven