EUVD-2023-0355

Malicious code in bioql PyPI...

EUVD-2022-5971

Malicious code in bioql PyPI...

EUVD-2022-2086

Malicious code in bioql PyPI...

EUVD-2023-1354

Malicious code in bioql PyPI...

EUVD-2022-5477

Malicious code in bioql PyPI...

EUVD-2022-5202

Malicious code in bioql PyPI...

EUVD-2022-6912

Malicious code in bioql PyPI...

EUVD-2022-3862

Malicious code in bioql PyPI...

EUVD-2022-2208

Malicious code in bioql PyPI...

EUVD-2022-6306

Malicious code in bioql PyPI...

EUVD-2022-4899

Malicious code in bioql PyPI...

EUVD-2023-0688

Malicious code in bioql PyPI...

EUVD-2022-3987

Malicious code in bioql PyPI...

EUVD-2022-2486

Malicious code in bioql PyPI...

EUVD-2022-2422

Malicious code in bioql PyPI...

Jenkins is missing a permission check in the authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

GHSA-223M-4RFP-646H Jenkins is missing a permission check in the authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

Missing permission check in authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

CVE-2025-58459

Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs...

CVE-2025-58460

A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b92bcd64 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...