CVE-2026-76346

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious script in dashboard sparkline format options and execute unauthorized JavaScript in the browser of another user who views the dashboard. If the other user holds...

EUVD-2023-34991

Malicious code in bioql PyPI...

PT-2020-15490 · Jenkins · Jenkins Coverage/Complexity Scatter Plot Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Coverage/Complexity Scatter Plot Plugin versions 1.1.1 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the plugin does not escape the method information in tooltips,...

PT-2020-15457 · Jenkins · Jenkins Yet Another Build Visualizer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Yet Another Build Visualizer Plugin versions 1.11 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. This occurs because the plugin does not escape tooltip content, allowing users with...