Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

193 New today
65,120 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

245
Jun 11
336
Jun 12
60
Jun 13
68
Jun 14
443
Jun 15
630
Jun 16
464
Jun 17
3
Jun 18
352
Jun 19
56
Jun 20
104
Jun 21
317
Jun 22
294
Jun 23
188
Jun 24
Critical
High
Medium
Low

Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.6 CVE-2025-71361

picklescan – Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tip_CVE-2025-71361

picklescan before 0.0.29 fails to detect malicious idlelib.calltip.Calltip.fetch_tip calls in pickle files, allowing remote code execution. Attacke...

picklescan picklescan CVE
MEDIUM 4.2 CVE-2026-57307

CVE-2026-57307_CVE-2026-57307

A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Overall/Read permission to con...

Jenkins Project Jenkins Zowe zDevOps Plugin CVE
MEDIUM 4.2 CVE-2026-57306

CVE-2026-57306_CVE-2026-57306

A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers to connect t...

Jenkins Project Jenkins Zowe zDevOps Plugin CVE
MEDIUM 5.4 CVE-2026-57305

CVE-2026-57305_CVE-2026-57305

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified U...

Jenkins Project Jenkins Assembla Plugin CVE
MEDIUM 5.4 CVE-2026-57304

CVE-2026-57304_CVE-2026-57304

A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-speci...

Jenkins Project Jenkins Assembla Plugin CVE
HIGH 7.1 CVE-2026-57303

CVE-2026-57303_CVE-2026-57303

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to ...

Jenkins Project Jenkins Assembla Plugin CVE
MEDIUM 4.3 CVE-2026-57302

CVE-2026-57302_CVE-2026-57302

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed b...

Jenkins Project Jenkins FitNesse Plugin 1.36 CVE
HIGH 8.8 CVE-2026-57301

CVE-2026-57301_CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers w...

Jenkins Project Jenkins OWASP ZAP Plugin 1.0.7 CVE
MEDIUM 4.3 CVE-2026-57300

CVE-2026-57300_CVE-2026-57300

A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read permission to read the Pip...

Jenkins Project Jenkins MCP Server Plugin 0.172.174.v9f72da_90a_710 CVE