EUVD-2015-1936

Malware in sbrugna...

EUVD-2016-4744

Malware in sbrugna...

EUVD-2022-4115

Malicious code in bioql PyPI...

EUVD-2022-5623

Malicious code in bioql PyPI...

EUVD-2022-3915

Malicious code in bioql PyPI...

EUVD-2022-4718

Malicious code in bioql PyPI...

EUVD-2022-6254

Malicious code in bioql PyPI...

GHSA-7XP8-7WQX-5HQX Jenkins REST APIs vulnerable to clickjacking

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier does not serve the X-Frame-Options: deny HTTP header on REST API responses to protect against clickjacking attacks. An attacker could exploit this by routing the victim through a specially crafted web page that embeds a REST API endpoint in an...

Jenkins Exposes Sensitive Information via API URL

The API URL computer/master/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors...