Skip to content
Fencer Intel

All · maven

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2025-67642 Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials
    maven
  2. 8.0
    CVE-2025-67641 Jenkins Coverage Plugin has a stored cross-site scripting (XSS) vulnerability
    maven
  3. 5.0
    CVE-2025-67640 Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin
    maven
  4. 3.5
    CVE-2025-67639 Jenkins has a CSRF vulnerability on the login form
    Jenkinsmavenbitnami
  5. 4.3
    CVE-2025-67638 Jenkins's build authorization token is stored and displayed in plain text
    Jenkinsmavenbitnami
  6. 4.3
    CVE-2025-67637 Jenkins's build authorization token is stored and displayed in plain text
    Jenkinsmavenbitnami
  7. 4.3
    CVE-2025-67636 Jenkins is missing a permission check on password fields
    Jenkinsmavenbitnami
  8. 7.5
    CVE-2025-67635 Jenkins has a Denial of service vulnerability in HTTP-based CLI
    Jenkinsmavenbitnami
  9. 8.8
    CVE-2025-66474 XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection
    maven
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  10. 7.5
    CVE-2025-66473 XWiki's REST APIs don't enforce any limits, leading to unavailability and OOM in large wikis
    maven
  11. 6.1
    CVE-2025-66472 XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication
    maven
  12. 8.2
    CVE-2025-66675 Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) - version ranges fixed
    maven
  13. 2.7
    CVE-2025-14082 Keycloak-services: keycloak admin rest api: improper access control leads to sensitive role metadata information disclosure
    maven
  14. —
    GHSA-93fv-4pm9-xp28 JDA (Java Discord API) downloads external URLs when updating message components
    maven
  15. 8.1
    CVE-2025-14307 Insecure Temporary File Creation in Robocode's AutoExtract Component
    maven
  16. 9.1
    CVE-2025-14306 Directory Traversal in Robocode's CacheCleaner Component
    maven
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  17. 7.4
    CVE-2025-66623 Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands
    maven
  18. 8.2
    CVE-2025-66566 yawkat LZ4 Java has a possible information leak in Java safe decompressor
    maven
  19. 8.4
    CVE-2025-66516 Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected
    maven
    1 public exploit EPSS 89.0% chance of exploitation in 30 days, percentile 99.7%
  20. 6.1
    CVE-2025-11222 Central Dogma's Login Function Has an Open Redirect Vulnerability
    maven
  21. 7.5
    CVE-2024-3884 Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded
    Springmaven
    EPSS 1.5% chance of exploitation in 30 days, percentile 73%
  22. 7.5
    CVE-2025-66453 Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function
    maven
  23. 5.3
    CVE-2025-13472 Missing authorization in BlazeMeter Jenkins Plugin
    maven
  24. 7.5
    CVE-2025-55749 The XWiki Jetty package (XJetty) allows accessing any application file through URL
    maven
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  25. 7.5
    CVE-2025-64775 Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS)
    maven
    EPSS 1.5% chance of exploitation in 30 days, percentile 75%
  26. 7.3
    CVE-2025-13806 nutzam NutzBoot Transaction API EthModule.java improper authorization
    maven
  27. 3.7
    CVE-2025-13805 nutzam NutzBoot LiteRpc-Serializer HttpServletRpcEndpoint.java getInputStream deserialization
    maven
  28. 4.3
    CVE-2025-13804 nutzam NutzBoot Ethereum Wallet EthModule.java information disclosure
    maven
  29. 8.8
    CVE-2025-12183 org.lz4:lz4-java - Out-of-Bounds Memory Access
    maven
  30. 2.8
    CVE-2025-66372 Mustangproject allows exfiltrating files via XXE attacks
    maven