org.jenkins-ci.main:jenkins-test-harness (1.409.1), org.jenkins-ci.main:jenkins-war (1.409.1) +2 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.409.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.409.1 - org.jenkins-ci.main:jenkins-war 1.409.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.409.2), org.jenkins-ci.main:jenkins-war (1.409.2) +4 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.409.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.409.2 - org.jenkins-ci.main:jenkins-war 1.409.2 -...

com.deepshiftlabs.nerrvana:nerrvana-plugin (>=1.02.03, <=1.02.05), net.praqma:drmemory-plugin (>=0.1.0, <=0.1.1) +11 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.450)

org.jenkins-ci.main:jenkins-core MAVEN version 1.450 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.deepshiftlabs.nerrvana:nerrvana-plugin =1.02.03, =0.1.0, =1.0, =0.3, =1.02r, =1.10, =1.3,...

com.castlemon.hudson:cucumber-perf (>=1.1, <=2.0.6), org.jenkins-ci.main:jenkins-test-harness (1.519) +5 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.519)

org.jenkins-ci.main:jenkins-core MAVEN version 1.519 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.castlemon.hudson:cucumber-perf =1.1, =1.3.4, =1.3.5 - org.jenkins-ci.plugins:plugin 1.519...

org.jenkins-ci.main:jenkins-test-harness (1.466.2), org.jenkins-ci.main:jenkins-war (1.466.2) +2 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.466.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.466.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.466.2 - org.jenkins-ci.main:jenkins-war 1.466.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.442), org.jenkins-ci.main:jenkins-war (1.442) +6 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.442)

org.jenkins-ci.main:jenkins-core MAVEN version 1.442 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.442 - org.jenkins-ci.main:jenkins-war 1.442 -...

org.jenkins-ci.main:jenkins-test-harness (1.449), org.jenkins-ci.main:jenkins-war (1.449) +4 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.449)

org.jenkins-ci.main:jenkins-core MAVEN version 1.449 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.449 - org.jenkins-ci.main:jenkins-war 1.449 -...

org.jenkins-ci.main:jenkins-test-harness (1.472), org.jenkins-ci.main:jenkins-war (1.472) +5 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.472)

org.jenkins-ci.main:jenkins-core MAVEN version 1.472 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.472 - org.jenkins-ci.main:jenkins-war 1.472 -...

EUVD-2025-202418

Malicious code in mws-common-ui npm...

Malicious code in mws-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1ca345fe8bb8298e9adc0920dea67d420dd5c57f79004c058df12bc365f016 The package mws-common-ui was found to contain malicious code. Source: ghsa-malware 935da08d8dffad1e28679a7043038425705e76dff3808c50361e8a67d02c55f8...

MAL-2025-192433 Malicious code in mws-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1ca345fe8bb8298e9adc0920dea67d420dd5c57f79004c058df12bc365f016 The package mws-common-ui was found to contain malicious code. Source: ghsa-malware 935da08d8dffad1e28679a7043038425705e76dff3808c50361e8a67d02c55f8...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

CVE-2025-66469

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to Reflected XSS through its ui.addcss, ui.addscss, and ui.addsass functions. The functions lack proper sanitization or encoding for the JavaScript context they generate. An attacker can break out of the intended or...

Huawei HarmonyOS/EMUI Privilege Control Vulnerability (CNVD-2026-0013753)

Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. A privilege...

CVE-2025-13954: Use of Hard-coded Credentials

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI...

PT-2026-7649

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.45 Description An improper implementation in the Downloads feature allows a remote attacker to perform UI spoofing through a specially crafted HTML page. The Chromium security severity is rated as Low...

PT-2025-50584

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.11 through 18.4.6 GitLab CE/EE versions 18.5 through 18.5.4 GitLab CE/EE versions 18.6 through 18.6.2 Description GitLab CE/EE is affected by an issue that, under certain circumstances, could allow an unauthenticated...

Gitlab -- vulnerabilities

Gitlab reports: Cross-site scripting issue in Wiki impacts GitLab CE/EE Improper encoding in vulnerability reports impacts GitLab CE/EE Cross-site scripting issue in Swagger UI impacts GitLab CE/EE Denial of service issue in GraphQL endpoints impacts GitLab CE/EE Authentication bypass issue for...

CVE-2025-65230

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting XSS vulnerability in the Web UI Configuration Streaming Destination input...

EUVD-2025-201854

SAPUI5 and OpenUI5 packages use outdated 3rd party libraries with known security vulnerabilities. When markdown-it encounters special malformed input, it fails to terminate properly, resulting in an infinite loop. This Denial of Service via infinite loop causes high CPU usage and system...