EUVD-2022-5034

Malicious code in bioql PyPI...

EUVD-2022-4572

Malicious code in bioql PyPI...

EUVD-2023-46583

Malicious code in bioql PyPI...

EUVD-2022-5283

Malicious code in bioql PyPI...

EUVD-2022-3340

Malicious code in bioql PyPI...

EUVD-2024-47483

Malicious code in bioql PyPI...

EUVD-2022-3963

Malicious code in bioql PyPI...

EUVD-2022-4666

Malicious code in bioql PyPI...

EUVD-2025-20505

Malicious code in bioql PyPI...

EUVD-2022-7015

Malicious code in bioql PyPI...

CVE-2019-10417

Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection...

CVE-2019-10418

Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection...

CVE-2013-2557

The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 20...

CVE-2025-31722

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution

Jenkins Templating Engine Plugin allows defining libraries both in the global configuration, as well as scoped to folders containing the pipelines using them. While libraries in the global configuration can only be set up by administrators and can therefore be trusted, libraries defined in folder...

GHSA-4VJP-327P-W4QV Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution

Jenkins Templating Engine Plugin allows defining libraries both in the global configuration, as well as scoped to folders containing the pipelines using them. While libraries in the global configuration can only be set up by administrators and can therefore be trusted, libraries defined in folder...

CVE-2025-31722

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2025-31722

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2025-31722

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2025-31722

The Jenkins Templating Engine (JTE) plugin (versions 2.5.3 and earlier ) is vulnerable to a sandbox bypass leading to Arbitrary Code Execution (RCE) . The root cause is that libraries defined in folders are not subject to sandbox protection; specifically, the injectPrimitives() function fails to ...