EUVD-2022-49553

Malicious code in bioql PyPI...

EUVD-2024-19892

Malicious code in bioql PyPI...

EUVD-2022-27513

Malicious code in bioql PyPI...

EUVD-2023-44947

Malicious code in bioql PyPI...

EUVD-2022-27512

Malicious code in bioql PyPI...

EUVD-2022-27461

Malicious code in bioql PyPI...

EUVD-2022-38591

Malicious code in bioql PyPI...

EUVD-2024-19920

Malicious code in bioql PyPI...

EUVD-2025-8494

Malicious code in bioql PyPI...

EUVD-2024-19900

Malicious code in bioql PyPI...

EUVD-2024-41338

Malicious code in bioql PyPI...

EUVD-2023-46471

Malicious code in bioql PyPI...

EUVD-2022-46847

Malicious code in bioql PyPI...

EUVD-2025-8499

Malicious code in bioql PyPI...

EUVD-2024-45784

Malicious code in bioql PyPI...

CVE-2025-36162

IBM DevOps Deploy / IBM UrbanCode Deploy UCD 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system...

CVE-2025-36162: Exposure of Sensitive System Information to an Unauthorized Control Sphere

IBM DevOps Deploy / IBM UrbanCode Deploy UCD 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Improper Resource Shutdown or Release in Eclipse Jetty (CVE-2024-13009)

Summary Eclipse Jetty is used by IBM DevOps Deploy / IBM UrbanCode Deploy UCD. CVE-2024-13009 Vulnerability Details CVEID:CVE-2024-13009 DESCRIPTION: In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. Thi...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to Improper Verification of Cryptographic Signature in SSHJ (CVE-2020-36843)

Summary The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous...

CVE-2024-22339

IBM UrbanCode Deploy UCD 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 is vulnerable to a sensitive information due to insufficient obfuscation of sensitive values from some log files. IBM X-Force ID: 279979...