16250 matches found
PT-2025-46976
Summary The expected protocDigest is ignored when protoc is taken from the PATH. Details The documentation for the protocDigest parameter says: ... Users may wish to specify this if using a PATH-based binary ... However, when specifying PATH the protocDigest is not actually checked because the co...
CVE-2025-64134
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks...
EUVD-2025-36649
Jenkins JDepend Plugin vulnerable to XML external entity attacks...
CVE-2025-64134
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2025-64134
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2025-64134
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2025-64134: Improper Restriction of XML External Entity Reference
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks...
Jenkins plugin JDepend security vulnerability
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...
XXE vulnerability in jdepend
jdepend 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to configure input files for the "Report JDepend" step to have Jenkins parse a crafted file that uses extern...
org.keycloak:keycloak-dependencies-server-all (24.0.1), org.keycloak:keycloak-dependencies-server-min (24.0.1) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.1)
org.keycloak:keycloak-admin-ui MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.1 - org.keycloak:keycloak-dependencies-server-m...
org.keycloak:keycloak-guides (21.1.1), org.keycloak:keycloak-guides-maven-plugin (21.1.1) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (21.1.1)
org.keycloak:keycloak-account-ui MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-guides 21.1.1 - org.keycloak:keycloak-guides-maven-plugin 21.1.1 -...
org.keycloak:keycloak-guides (22.0.2), org.keycloak:keycloak-guides-maven-plugin (22.0.2) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (22.0.2)
org.keycloak:keycloak-account-ui MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-guides 22.0.2 - org.keycloak:keycloak-guides-maven-plugin 22.0.2 -...
org.keycloak:keycloak-guides (21.1.2), org.keycloak:keycloak-guides-maven-plugin (21.1.2) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (21.1.2)
org.keycloak:keycloak-admin-ui MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-guides 21.1.2 - org.keycloak:keycloak-guides-maven-plugin 21.1.2 -...
org.keycloak:keycloak-dependencies-server-all (24.0.0), org.keycloak:keycloak-dependencies-server-min (24.0.0) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.0)
org.keycloak:keycloak-admin-ui MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.0 - org.keycloak:keycloak-dependencies-server-m...
org.keycloak:keycloak-dependencies-server-all (25.0.0), org.keycloak:keycloak-dependencies-server-min (25.0.0) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (25.0.0)
org.keycloak:keycloak-admin-ui MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.0 - org.keycloak:keycloak-dependencies-server-m...
org.keycloak:keycloak-guides (21.1.2), org.keycloak:keycloak-guides-maven-plugin (21.1.2) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (21.1.2)
org.keycloak:keycloak-account-ui MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-guides 21.1.2 - org.keycloak:keycloak-guides-maven-plugin 21.1.2 -...
EUVD-2019-10896
Malware in sbrugna...
EUVD-2022-4981
Malicious code in bioql PyPI...