org.jenkins-ci.main:jenkins-test-harness (1.640), org.jenkins-ci.main:jenkins-war (1.640) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.640)

org.jenkins-ci.main:jenkins-core MAVEN version 1.640 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.640 - org.jenkins-ci.main:jenkins-war 1.640 -...

org.jenkins-ci.main:jenkins-test-harness (1.641), org.jenkins-ci.main:jenkins-war (1.641) +2 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.641)

org.jenkins-ci.main:jenkins-core MAVEN version 1.641 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.641 - org.jenkins-ci.main:jenkins-war 1.641 -...

com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.651.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...

org.jenkins-ci.main:jenkins-test-harness (1.543), org.jenkins-ci.main:jenkins-war (1.543) +1 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.543)

org.jenkins-ci.main:jenkins-core MAVEN version 1.543 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.543 - org.jenkins-ci.main:jenkins-war 1.543 -...

org.jenkins-ci.main:jenkins-test-harness (1.422), org.jenkins-ci.main:jenkins-war (1.422) +3 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.422)

org.jenkins-ci.main:jenkins-core MAVEN version 1.422 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.422 - org.jenkins-ci.main:jenkins-war 1.422 -...

org.jenkins-ci.main:jenkins-test-harness (1.562), org.jenkins-ci.main:jenkins-war (1.562) +1 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.562)

org.jenkins-ci.main:jenkins-core MAVEN version 1.562 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.562 - org.jenkins-ci.main:jenkins-war 1.562 -...

org.jenkins-ci.main:jenkins-test-harness (1.495), org.jenkins-ci.main:jenkins-war (1.495) +6 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.495)

org.jenkins-ci.main:jenkins-core MAVEN version 1.495 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.495 - org.jenkins-ci.main:jenkins-war 1.495 -...

org.jenkins-ci.main:jenkins-test-harness (1.497), org.jenkins-ci.main:jenkins-war (1.497) +3 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.497)

org.jenkins-ci.main:jenkins-core MAVEN version 1.497 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.497 - org.jenkins-ci.main:jenkins-war 1.497 -...

org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.598)

org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...

org.jenkins-ci.main:jenkins-test-harness (1.606), org.jenkins-ci.main:jenkins-war (1.606) +1 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.606)

org.jenkins-ci.main:jenkins-core MAVEN version 1.606 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.606 - org.jenkins-ci.main:jenkins-war 1.606 -...

Path Traversal

github.com/mattermost/mattermost-server is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths during plugin import operations, which allows an attacker with restricted admin privileges to install unauthorized custom plugins by bypassing plugin signature...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.7.1 release.

Red Hat Developer Hub 1.7.1 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Medium: gstreamer1-plugins-good

Issue Overview: GStreamer is a library for constructing graphs of media-handling components. The function qtdemuxparsesbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10. CVE-2024-47544 In GStreamer through 1.26.1, the isomp4 plugin's...

Medium: gstreamer1-plugins-base

Issue Overview: In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bounds of a stack buffer, leading to a crash. CVE-2025-47806 In GStreamer through 1.26.1, the subparse plugin's subripunescapeformatting function may dereference a NULL pointer whil...

Amazon Linux 2 : gstreamer1-plugins-good, --advisory ALAS2-2025-3003 (ALAS-2025-3003)

The version of gstreamer1-plugins-good installed on the remote host is prior to 1.18.4-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3003 advisory. GStreamer is a library for constructing graphs of media-handling components. The function qtdemuxparsesbg...

fimap

fimap is a Python tool designed to find, prepare, audit, exploit, and even automatically Google for local and remote file inclusion LFI/RFI bugs in web applications. It can identify and exploit file inclusion bugs, including include, includeonce, require, and requireonce functions. The tool has a...

CVE-2025-9463

The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 1.117.5 due to insufficient escaping on the user supplied parameter and...

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 1, 2025 to September 7, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 pe...

CVE-2025-9161

A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, which can be used to achieve remote code execution...

CVE-2025-9463 Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter

The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 1.117.5 due to insufficient escaping on the user supplied parameter and...