EUVD-2021-28601

Malicious code in bioql PyPI...

EUVD-2021-28603

Malicious code in bioql PyPI...

EUVD-2021-28632

Malicious code in bioql PyPI...

EUVD-2022-52433

Malicious code in bioql PyPI...

EUVD-2022-44766

Malicious code in bioql PyPI...

EUVD-2021-28598

Malicious code in bioql PyPI...

EUVD-2022-30035

Malicious code in bioql PyPI...

EUVD-2021-28600

Malicious code in bioql PyPI...

EUVD-2022-5389

Malicious code in bioql PyPI...

EUVD-2022-52432

Malicious code in bioql PyPI...

EUVD-2022-44767

Malicious code in bioql PyPI...

EUVD-2021-28604

Malicious code in bioql PyPI...

CVE-2022-41575

A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to access a subset of application data e.g., cleartext credentials. This is fixed in 2022.3.3...

CVE-2022-41574

An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and send emails with arbitrary text content to the configured installation-administrator contact address, via HTTP access to an accidentally exposed internal...

CVE-2022-30587

Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure...

CVE-2022-30586

Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution...

CVE-2022-27225

Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It uses Keycloak for identity management services. During the sign-in process, Keycloak sets browser cookies that effectively provide remember-me functionality. For backwards compatibility with older Safar...

CVE-2022-25364

In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access. If this was not manually changed, a malicious actor with network access to the build cache could potentially populate it with manipulated entries that execute malicious code as par...

CVE-2021-41589

In Gradle Enterprise before 2021.3 and Enterprise Build Cache Node before 10.0, there is potential cache poisoning and remote code execution when running the build cache node with its default configuration. This configuration allows anonymous access to the configuration user interface and anonymo...

CVE-2021-41619

An issue was discovered in Gradle Enterprise before 2021.1.2. There is potential remote code execution via the application startup configuration. The installation configuration user interface available to administrators allows specifying arbitrary Java Virtual Machine startup options. Some of the...