EUVD-2022-3266

Malicious code in bioql PyPI...

EUVD-2022-2703

Malicious code in bioql PyPI...

EUVD-2022-6153

Malicious code in bioql PyPI...

EUVD-2022-7183

Malicious code in bioql PyPI...

EUVD-2022-5257

Malicious code in bioql PyPI...

EUVD-2023-2170

Malicious code in bioql PyPI...

EUVD-2023-2194

Malicious code in bioql PyPI...

EUVD-2022-6130

Malicious code in bioql PyPI...

EUVD-2022-3546

Malicious code in bioql PyPI...

EUVD-2022-5774

Malicious code in bioql PyPI...

EUVD-2023-1991

Malicious code in bioql PyPI...

EUVD-2022-6165

Malicious code in bioql PyPI...

EUVD-2022-2866

Malicious code in bioql PyPI...

EUVD-2022-2687

Malicious code in bioql PyPI...

CVE-2025-58460

The Jenkins OpenTelemetry Plugin (versions 3.1543.v8446b_92b_cd64 and earlier) is vulnerable to an authorization bypass caused by a missing permission check during form validation. An attacker with Overall/Read permissions can use credentials IDs obtained through other methods to connect to an at...

CVE-2023-37952

A cross-site request forgery CSRF vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2023-30525

A cross-site request forgery CSRF vulnerability in Jenkins Report Portal Plugin 0.5 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified bearer token authentication...

CVE-2023-24458

A cross-site request forgery CSRF vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL...

CVE-2022-41245

A cross-site request forgery CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2022-36921

A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...