Skip to content
Fencer Intel

All · maven

Newest first, late arrivals on top. Also a feed.

  1. 5.4
    CVE-2025-43823 Liferay Portal is vulnerable to XSS through its Commerce Search Result widget
    maven
  2. 5.4
    CVE-2025-43824 Liferay Profile Widget does not prevent vCard extension spoofing
    maven
  3. 9.3
    CVE-2025-52472 XWiki Platform vulnerable to HQL injection via wiki and space search REST API
    maven
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  4. 9.2
    CVE-2025-49594 XWiki OIDC Authenticator vulnerable to creation of token for any user with just `view` right
    maven
  5. 6.5
    CVE-2025-43825 Liferay Portal exposes sensitive user data through its Freemarker template
    maven
  6. 7.3
    CVE-2025-61735 Apache Kylin: Server-Side Request Forgery
    maven
    EPSS 1.0% chance of exploitation in 30 days, percentile 63%
  7. 7.5
    CVE-2025-61733 Apache Kylin: Authentication bypass
    maven
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  8. 7.5
    CVE-2025-61734 Apache Kylin: improper restriction of file read
    maven
    EPSS 28.8% chance of exploitation in 30 days, percentile 98%
  9. 7.0
    CVE-2025-11226 Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino
    maven
  10. 5.4
    CVE-2025-43826 Liferay Portal Vulnerable to XSS in Web Content translation
    maven
  11. 4.3
    CVE-2025-43827 Liferay Portal Vulnerable to IDOR via audit events
    maven
  12. 6.1
    CVE-2025-43817 Liferay Portal vulnerable to reflected cross-site scripting via the `redirect` parameter
    maven
  13. 8.2
    CVE-2025-43813 Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet
    maven
  14. 5.4
    CVE-2025-43812 Liferay Portal vulnerable to cross-site scripting in the web content template
    maven
  15. 5.4
    CVE-2025-43811 Liferay Portal vulnerable to cross-site scripting in the related asset selector
    maven
  16. 5.4
    CVE-2025-43820 Liferay Portal vulnerable to cross-site scripting in the Calendar widget
    maven
  17. 6.1
    CVE-2025-43818 Liferay Portal vulnerable to cross-site scripting in the Calendar widget
    maven
  18. 6.1
    CVE-2025-43815 Liferay Portal vulnerable to reflected cross-site scripting on the page configuration page
    maven
  19. 8.7
    CVE-2025-59952 minio-java Client XML Tag is Vulnerable to Value Substitution
    maven
  20. 3.7
    CVE-2025-1396 Username Enumeration in Multiple WSO2 Products with Multi-Attribute Login Enabled
    maven
  21. 7.5
    CVE-2025-43816 Liferay Portal and DXP vulnerable to a memory leak
    maven
  22. 6.5
    CVE-2025-56769 Hutool allows remote code execution (RCE) via the QLExpressEngine class
    maven
  23. 4.3
    CVE-2025-58457 Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands
    mavenbitnami
  24. 7.5
    CVE-2025-48392 Apache IoTDB: DoS Vulnerability
    maven
  25. 5.3
    CVE-2025-48459 Apache IoTDB: Deserialization of untrusted Data
    mavenpypi
  26. 6.5
    CVE-2025-43819 Liferay Portal and DXP does not properly expire sessions
    maven
  27. 7.5
    CVE-2025-59822 Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section
    maven
  28. 4.3
    CVE-2024-6429 Content Spoofing in Multiple WSO2 Products via Error Message Injection
    maven
  29. 4.8
    CVE-2025-4760 Authenticated Stored Cross-Site Scripting (XSS) in Multiple WSO2 Products via API Document Upload in Publisher
    maven
  30. 6.5
    CVE-2025-43814 Liferay Portal and DXP audit events record password reminder answers
    maven