com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

info.bluefloyd.jenkins:jenkins-jira-issue-updater (>=1.17, <=1.18), jenkins.plugins:mqtt-notification-plugin (1.3) +6 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.600)

org.jenkins-ci.main:jenkins-core MAVEN version 1.600 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - info.bluefloyd.jenkins:jenkins-jira-issue-updater =1.17, =1.14, =1.20, =1.21 -...

info.bluefloyd.jenkins:jenkins-jira-issue-updater (>=1.17, <=1.18), jenkins.plugins:mqtt-notification-plugin (1.3) +6 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.600)

org.jenkins-ci.main:jenkins-core MAVEN version 1.600 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - info.bluefloyd.jenkins:jenkins-jira-issue-updater =1.17, =1.14, =1.20, =1.21 -...

info.bluefloyd.jenkins:jenkins-jira-issue-updater (>=1.17, <=1.18), jenkins.plugins:mqtt-notification-plugin (1.3) +6 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.600)

org.jenkins-ci.main:jenkins-core MAVEN version 1.600 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - info.bluefloyd.jenkins:jenkins-jira-issue-updater =1.17, =1.14, =1.20, =1.21 -...

com.tikalk.hudson.plugins:notification (1.10), org.jenkins-ci.main:jenkins-test-harness (1.605) +5 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.605)

org.jenkins-ci.main:jenkins-core MAVEN version 1.605 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification 1.10 - org.jenkins-ci.main:jenkins-test-harness 1.605 -...

com.tikalk.hudson.plugins:notification (1.10), org.jenkins-ci.main:jenkins-test-harness (1.605) +5 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.605)

org.jenkins-ci.main:jenkins-core MAVEN version 1.605 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification 1.10 - org.jenkins-ci.main:jenkins-test-harness 1.605 -...

Linux Distros Unpatched Vulnerability : CVE-2024-7964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HT...

CVE-2025-1672: Improper Neutralization of Input During Web Page Generation

The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

hosmetika.com Cross Site Scripting vulnerability OBB-4032873

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: SNYK:JAVA-ORGOPENIDENTITYPLATFORMOPENDJ-9296373...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: OSV:GHSA-93QR-H8PR-4593...

CVE-2022-47471

creationtimestamp| type| source ---|---|--- 2025-03-05 18:30:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6566 2025-03-06 02:16:33+00:00| seen| Telegram/UwEnmNJMWmQVBCQXZ4fNxHRBq5wjoQU2WipUyFLQ0mQtgWn...

prostejov.charita.cz Cross Site Scripting vulnerability OBB-4032765

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-25092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gtlwpdev All push notification for WP all-push-notification allows Reflected XSS.This issue affects All push notification for WP: from n/a through = 1.5.3...

159.213.95.27 Cross Site Scripting vulnerability OBB-4032758

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dotcomeventi.com Cross Site Scripting vulnerability OBB-4032757

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

charitausti.cz Cross Site Scripting vulnerability OBB-4032746

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

retrogames.cz Cross Site Scripting vulnerability OBB-4032667

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-13866 Simple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Simple Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary...