EUVD-2022-3461

Malicious code in bioql PyPI...

EUVD-2022-7681

Malicious code in bioql PyPI...

EUVD-2022-2208

Malicious code in bioql PyPI...

EUVD-2022-3819

Malicious code in bioql PyPI...

EUVD-2022-2015

Malicious code in bioql PyPI...

EUVD-2022-5830

Malicious code in bioql PyPI...

EUVD-2022-6356

Malicious code in bioql PyPI...

EUVD-2023-2437

Malicious code in bioql PyPI...

EUVD-2022-5453

Malicious code in bioql PyPI...

EUVD-2022-5725

Malicious code in bioql PyPI...

EUVD-2023-1970

Malicious code in bioql PyPI...

EUVD-2022-2142

Malicious code in bioql PyPI...

EUVD-2025-10674

Malicious code in bioql PyPI...

EUVD-2022-5780

Malicious code in bioql PyPI...

EUVD-2023-1397

Malicious code in bioql PyPI...

EUVD-2023-2558

Malicious code in bioql PyPI...

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2014-6278link is external GNU Bash OS Command Injection Vulnerability CVE-2015-7755link is external Juniper ScreenOS Improper Authentication Vulnerability...

Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.

...

Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook endpoint, including jobs the user has no permission to access.

...

Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

...