Skip to content
Fencer Intel

All · maven

Newest first, late arrivals on top. Also a feed.

  1. 8.2
    CVE-2025-53652 Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check
    maven
  2. 6.3
    CVE-2025-53651 Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs
    maven
  3. 7.3
    CVE-2025-53650 Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
    maven
  4. 5.3
    CVE-2025-53602 Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint
    maven
  5. 5.8
    CVE-2025-53103 JUnit OpenTestReportGeneratingListener can leak Git credentials
    maven
  6. 8.8
    CVE-2025-53106 Graylog vulnerable to privilege escalation through API tokens
    maven
  7. 8.2
    CVE-2025-53003 Janssen Config API returns results without scope verification
    maven
  8. 9.8
    CVE-2025-26074 Conductor vulnerable to OS command injection through unrestricted access to Java classes
    maven
  9. 9.8
    CVE-2025-32897 Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server
    maven
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  10. 6.0
    CVE-2025-53393 akka-cluster-metrics uses Java serialization for cluster metrics
    maven
  11. 5.5
    CVE-2025-5731 Infinispan: credential leakage in infinispan cli
    maven
  12. 3.5
    CVE-2025-6701 Xuxueli xxl-sso doLogin redirect
    maven
  13. 4.3
    CVE-2025-6700 Xuxueli xxl-sso login cross site scripting
    maven
  14. 8.7
    CVE-2025-52999 jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data
    maven
  15. 7.5
    CVE-2025-52888 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction
    maven
  16. 6.4
    CVE-2025-49574 Quarkus potential data leak when duplicating a duplicated context
    maven
  17. —
    GHSA-7cjh-xx4r-qh3f sentry-android unmasked sensitive data in Android Session Replays for users of Jetpack Compose 1.8+
    maven
  18. 9.1
    CVE-2025-6384 Improper Control of Dynamically-Managed Code Resources in Crafter Studio
    maven
  19. 2.7
    CVE-2025-48059 PowSyBl Core Contains a Polynomial ReDoS in RegexCriterion
    maven
  20. 6.3
    CVE-2025-48058 PowSyBl Core contains Polynomial REDoS’es
    maven
  21. 8.1
    CVE-2025-47771 PowSyBl Core allows deserialization of untrusted SparseMatrix data
    maven
  22. 2.7
    CVE-2025-47293 PowSyBl Core XML Reader allows XXE and SSRF
    maven
  23. 6.5
    CVE-2025-32896 Apache SeaTunnel: Unauthenticated insecure access
    maven
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  24. 7.5
    CVE-2025-48976 Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers
    maven
    EPSS 34.0% chance of exploitation in 30 days, percentile 98%
  25. 8.4
    CVE-2025-49124 Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows
    mavenbitnami
  26. 7.5
    CVE-2025-3526 Liferay Portal SessionClicks does not restrict the saving of request parameters in the HTTP session
    maven
  27. 7.5
    CVE-2025-49125 Apache Tomcat: Security constraint bypass for pre/post-resources
    mavenbitnami
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  28. 9.8
    CVE-2025-3594 Liferay Portal path traversal vulnerability with the downloading and installation of Xuggler
    maven
  29. 7.5
    CVE-2025-48988 Apache Tomcat: FileUpload large number of parts with headers DoS
    mavenbitnami
    EPSS 31.5% chance of exploitation in 30 days, percentile 98%
  30. 7.5
    CVE-2025-3602 Liferay Portal does not limit the depth of a GraphQL queries
    maven