CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo score- dell powerflex manager vm, powerflex manager +1 moreDell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive...4.3 Medium
- qwikdev qwikCrashing any Qwik Server9.2 Critical
- edgelesssys contrastEdgeless Systems Contrast before 1.9.1 Insecure Volume Mount5.1 Medium
ca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo score- clerk javascript@clerk/backend Performs Insufficient Verification of Data Authenticity7.5 High
- drupal mail loginMail Login - Critical - Access bypass - SA-CONTRIB-2025-0889.8 Critical
- cookies addons project addons, drupal cookies addons +1 moreCookies Addons - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-0876.1 Medium
gitUbuntugit regressionNo score- jenkins applitools eyes, jenkins project applitools eyes plugin +1 moreJenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form5.3 Medium
- jenkins applitools eyes, jenkins project applitools eyes plugin +1 moreJenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated users6.5 Medium
- jenkins user1st utester, jenkins project user1st utester plugin +1 moreJenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated users6.5 Medium
- jenkins xooa, jenkins project xooa plugin +1 moreJenkins Xooa Plugin vulnerability does not mask its Xooa Deployment Token5.3 Medium
- jenkins xooa, jenkins project xooa plugin +1 moreJenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users6.5 Medium
- jenkins warrior framework, jenkins project warrior framework plugin +1 moreJenkins Warrior Framework Plugin vulnerability exposes unencrypted passwords to certain authenticated users6.5 Medium
- jenkins sensedia api platform tools, jenkins project sensedia api platform tools plugin +1 moreJenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens5.3 Medium
- jenkins sensedia api platform tools, jenkins project sensedia api platform tools plugin +1 moreJenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file6.5 Medium
- jenkins kryptowire, jenkins project kryptowire plugin +1 moreJenkins Kryptowire Plugin vulnerability stores unencrypted Kryptowire API key6.5 Medium
- jenkins nouvola divecloud, jenkins project nouvola divecloud plugin +1 moreJenkins Nouvola DiveCloud Plugin vulnerability does not mask keys on its job configuration form6.5 Medium
- jenkins nouvola divecloud, jenkins project nouvola divecloud plugin +1 moreJenkins Nouvola DiveCloud Plugin vulnerability stores unencrypted credentials6.5 Medium
- jenkins vaddy, jenkins project vaddy plugin +1 moreJenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration form4.3 Medium
- jenkins vaddy, jenkins project vaddy plugin +1 moreJenkins VAddy Plugin vulnerability exposes unencrypted keys to certain authenticated users6.5 Medium
- jenkins project dead man's snitch plugin, jenkins dead man\'s snitch +1 moreJenkins Dead Man's Snitch Plugin vulnerability does not mask tokens5.3 Medium
- jenkins project dead man's snitch plugin, jenkins dead man\'s snitch +1 moreJenkins Dead Man's Snitch Plugin vulnerability stores tokens in plain text6.5 Medium
- jenkins apica loadtest, jenkins project apica loadtest plugin +1 moreJenkins Apica Loadtest Plugin vulnerability exposes authentication tokens4.3 Medium
- jenkins apica loadtest, jenkins project apica loadtest plugin +1 moreJenkins Apica Loadtest Plugin vulnerability exposes authentication tokens6.5 Medium
- jenkins ibm cloud devops, jenkins project ibm cloud devops plugin +1 moreJenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens6.5 Medium
- jenkins ifttt build notifier, jenkins project ifttt build notifier plugin +1 moreJenkins IFTTT Build Notifier Plugin vulnerability exposes IFTTT Maker Channel Keys6.5 Medium
- jenkins testsigma test plan run, jenkins project testsigma test plan run plugin +1 moreJenkins Testsigma Test Plan vulnerability exposes API keys via job configuration form4.3 Medium
- jenkins qmetry test management, jenkins project qmetry test management plugin +1 moreJenkins QMetry Test Management Plugin vulnerability exposes API keys4.3 Medium
- jenkins qmetry test management, jenkins project qmetry test management plugin +1 moreJenkins QMetry Test Management Plugin stores unencrypted API keys6.5 Medium
- jenkins applitools eyes, jenkins project applitools eyes plugin +1 moreJenkins Applitools Eyes Plugin vulnerable to XSS through its Build page5.4 Medium
- jenkins readyapi functional testing, jenkins project readyapi functional testing plugin +1 moreJenkins ReadyAPI Functional Testing Plugin vulnerability exposes secrets4.3 Medium
- jenkins readyapi functional testing, jenkins project readyapi functional testing plugin +1 moreJenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentials6.5 Medium
- jenkins statistics gatherer, jenkins project statistics gatherer plugin +1 moreJenkins Statistics Gatherer Plugin does not mask AWS Secret Key5.3 Medium
- jenkins statistics gatherer, jenkins project statistics gatherer plugin +1 moreJenkins Statistics Gatherer Plugin vulnerability exposes AWS Secret Key6.5 Medium
- jenkins aqua security scanner, jenkins project aqua security scanner plugin +1 moreJenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokens4.3 Medium
- jenkins git parameter, jenkins project git parameter plugin +1 moreJenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check8.2 High
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs6.3 Medium
- jenkins credentials binding, jenkins project credentials binding plugin +1 moreJenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages7.3 High
- mautic docker mauticExposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images5.3 Medium
- connectwise psa, professional service automation +1 moreExposure of password hashes via API responses in ConnectWise PSA6.5 Medium
- ibm openpages with watsonIBM OpenPages with Watson information disclosure4.3 Medium
- ibm openpagesIBM OpenPages information disclosure4.3 Medium
- Show moreLoading…