OP-SEC Multi-Router Looking Glass Web Detection

Binary data op-secmrlgdetect.nbin...

Exploit for CVE-2025-34085

CVE-2025-34085 Multi-Target RCE Scanner Mass-exploitation s...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: nrjmx, celeborn, nextflow, jenkins-plugin-manager, maven-stage0, druid, cassandra, keycloak-config-cli, kserve-modelmesh, apache-activemq-artemis, airflow, management-api-for-apache-cassandra-5.0, zipkin, sonarqube, apicurio-registry, akhq, confluent-kafka, spark,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: nrjmx, celeborn, nextflow, jenkins-plugin-manager, maven-stage0, druid, cassandra, keycloak-config-cli, kserve-modelmesh, apache-activemq-artemis, airflow, management-api-for-apache-cassandra-5.0, zipkin, sonarqube, apicurio-registry, akhq, confluent-kafka, spark,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, opensearch, kafka, apache-tika, sonarqube, airflow, dependency-track, druid, management-api-for-apache-cassandra-4.1, commercial-elasticsearch, cassandra, logstash, management-api-for-apache-cassandra-4.0, debezium-connector-spanner,...

CVE-2025-53653

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

HashiCorp Vagrant Installed (macOS)

Binary data macosvagrantinstalled.nbin...

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server, related to the lack of data encryption measures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Aqua Security Scanner plugin in the Jenkins automation server is related to the lack of data encryption measures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-32415)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32415 advisory. - In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-...

Azure Linux 3.0 Security Update: ansible (CVE-2023-5115)

The version of ansible installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5115 advisory. - An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to...

CBL Mariner 2.0 Security Update: sudo (CVE-2025-32462)

The version of sudo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32462 advisory. - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor...

Cockpit Detection

Binary data cockpitdetect.nbin...

Exploit for CVE-2024-27954

CVE-2024-27954 - WordPress wp-automatic Plugin LFI Scanner Th...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-083)

The version of kernel installed on the remote host is prior to 5.15.59-33.133. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.15-2025-083 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before...

PHP 8.1.x < 8.1.33 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.33, 8.2.x prior to 8.2.29, 8.3.x prior to 8.3.23, or 8.4.x prior to 8.4.10. It is, therefore, affected by multiple vulnerabilities: - pgsql extension does not check for errors duri...

GHSA-3WGG-3J4J-3F69 Jenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokens

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file...

Cleartext Storage of Sensitive Information

Overview org.jenkins-ci.plugins:aqua-security-scanner is a Jenkins plugin for calling the Aqua API to scan a Docker image Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the storage of Scanner Tokens for Aqua API in config.xml files on the...

CVE-2025-53653

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53653

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53653

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...