com.cloudcoreo.plugins:cloudcoreo-deploytime (>=0.1.0, <=0.2.3), com.spcow.plugins:winrm-client (1.0) +50 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.651.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudcoreo.plugins:cloudcoreo-deploytime =0.1.0, =0.10.0, =1.2, =1.4.2, =1.5.0, =1.0, =1....

CSRF vulnerability and missing permission checks in embotics-vcommander allow capturing credentials

embotics-vcommander 1.10 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing...