2025 CVE Vulnerabilities
45,179 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-53675 | MEDIUM | 6.5 | 0.3% | Jul 9, 2025 | Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins con... |
| CVE-2025-53674 | MEDIUM | 5.3 | 0.3% | Jul 9, 2025 | Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global co... |
| CVE-2025-53673 | MEDIUM | 6.5 | 0.2% | Jul 9, 2025 | Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its glob... |
| CVE-2025-53672 | MEDIUM | 6.5 | 0.3% | Jul 9, 2025 | Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on ... |
| CVE-2025-53671 | MEDIUM | 6.5 | 0.2% | Jul 9, 2025 | Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displ... |
| CVE-2025-53670 | MEDIUM | 6.5 | 0.1% | Jul 9, 2025 | Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted ... |
| CVE-2025-53669 | MEDIUM | 4.3 | 0.2% | Jul 9, 2025 | Jenkins VAddy Plugin 1.2.8 and earlier does not mask Vaddy API Auth Keys displayed on the job configuration form, increa... |
| CVE-2025-53668 | MEDIUM | 6.5 | 0.2% | Jul 9, 2025 | Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the Jenkins con... |
| CVE-2025-53667 | MEDIUM | 5.3 | 0.3% | Jul 9, 2025 | Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, inc... |
| CVE-2025-53666 | MEDIUM | 6.5 | 0.2% | Jul 9, 2025 | Jenkins Dead Man's Snitch Plugin 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins ... |
| CVE-2025-53665 | MEDIUM | 4.3 | 0.3% | Jul 9, 2025 | Jenkins Apica Loadtest Plugin 1.10 and earlier does not mask Apica Loadtest LTP authentication tokens displayed on the j... |
| CVE-2025-53664 | MEDIUM | 6.5 | 0.3% | Jul 9, 2025 | Jenkins Apica Loadtest Plugin 1.10 and earlier stores Apica Loadtest LTP authentication tokens unencrypted in job config... |
| CVE-2025-53663 | MEDIUM | 6.5 | 0.2% | Jul 9, 2025 | Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml ... |
| CVE-2025-53662 | MEDIUM | 6.5 | 0.3% | Jul 9, 2025 | Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files ... |
| CVE-2025-53661 | MEDIUM | 4.3 | 0.2% | Jul 9, 2025 | Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configurati... |
| CVE-2025-53660 | MEDIUM | 4.3 | 0.2% | Jul 9, 2025 | Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job con... |
| CVE-2025-53659 | MEDIUM | 6.5 | 0.2% | Jul 9, 2025 | Jenkins QMetry Test Management Plugin 1.13 and earlier stores Qmetry Automation API Keys unencrypted in job config.xml f... |
| CVE-2025-53658 | MEDIUM | 5.4 | 0.2% | Jul 9, 2025 | Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a s... |
| CVE-2025-53657 | MEDIUM | 4.3 | 0.2% | Jul 9, 2025 | Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and p... |
| CVE-2025-53656 | MEDIUM | 6.5 | 0.3% | Jul 9, 2025 | Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and password... |
| CVE-2025-53655 | MEDIUM | 5.3 | 0.3% | Jul 9, 2025 | Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, ... |
| CVE-2025-53654 | MEDIUM | 6.5 | 0.4% | Jul 9, 2025 | Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration f... |
| CVE-2025-53653 | MEDIUM | 4.3 | 0.2% | Jul 9, 2025 | Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml ... |
| CVE-2025-53651 | MEDIUM | 6.3 | 0.4% | Jul 9, 2025 | Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived du... |
| CVE-2025-49604 | MEDIUM | 5.4 | 0.3% | Jul 9, 2025 | For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now