EUVD-2016-10502

Malware in sbrugna...

EUVD-2011-2590

Malware in sbrugna...

EUVD-2018-11986

Malware in sbrugna...

EUVD-2018-12562

Malware in sbrugna...

EUVD-2020-26236

Malware in sbrugna...

EUVD-2012-0780

Malware in sbrugna...

EUVD-2014-6015

Malware in sbrugna...

EUVD-2016-0366

Malware in sbrugna...

EUVD-2017-10381

Malware in sbrugna...

EUVD-2017-10119

Malware in sbrugna...

EUVD-2017-10129

Malware in sbrugna...

EUVD-2017-10717

Malware in sbrugna...

EUVD-2022-5582

Malicious code in bioql PyPI...

EUVD-2023-1818

Malicious code in bioql PyPI...

EUVD-2022-3546

Malicious code in bioql PyPI...

Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerability CVE-2024-28793

Summary Vulnerability CVE-2024-28793 affects the Team Concert Git plugin of IBM Engineering Workflow Management EWM. Vulnerability Details CVEID:CVE-2024-28793 DESCRIPTION: IBM Engineering Workflow Management is vulnerable to stored cross-site scripting. Under certain configurations, this...

Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerability CVE-2023-3315

Summary Vulnerability CVE-2023-3315 affects the Team Concert plugin of IBM Engineering Workflow Management EWM. Vulnerability Details CVEID:CVE-2023-3315 DESCRIPTION: Jenkins Team Concert could allow a remote authenticated attacker to obtain sensitive information, caused by improper permission...

CVE-2023-3315

Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

Jenkins Team Concert Plugin does not perform permission checks in methods implementing form validation

Jenkins Team Concert Plugin 2.4.1 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Team Concert Plugin 2.4...

GHSA-HCPW-V727-64QH Jenkins Team Concert Plugin does not perform permission checks in methods implementing form validation

Jenkins Team Concert Plugin 2.4.1 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Team Concert Plugin 2.4...