426 matches found
CVE-2025-64139
A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2025-64136
A cross-site request forgery CSRF vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server...
CVE-2025-64136
A cross-site request forgery CSRF vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server...
CVE-2025-64149
The Jenkins Publish to Bitbucket Plugin (version 0.4 and earlier) is vulnerable to a Cross-Site Request Forgery (CSRF) and a missing permissions check in an HTTP endpoint. An attacker with Overall/Read permission can force a victim to connect Jenkins to an attacker-controlled URL using specific c...
CVE-2025-64138
A cross-site request forgery CSRF vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL...
CVE-2025-64138
The Jenkins Start Windocks Containers Plugin (version 1.4 and earlier) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The root cause is insufficient request validation and a lack of permission checks on an HTTP endpoint. This allows an attacker with Overall/Read permission to...
CVE-2025-64136
The Jenkins Themis Plugin (version 1.4.1 and earlier) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The root cause is a lack of permission checks on an HTTP endpoint, which allows an attacker with Overall/Read permissions to initiate connections to an attacker-specified URL....
CVE-2025-64141: Cross-Site Request Forgery (CSRF)
A cross-site request forgery CSRF vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...
CVE-2025-64139: Missing Authorization
A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2025-64136: Cross-Site Request Forgery (CSRF)
A cross-site request forgery CSRF vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server...
CVE-2025-64138: Cross-Site Request Forgery (CSRF)
A cross-site request forgery CSRF vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL...
EUVD-2022-6153
Malicious code in bioql PyPI...
EUVD-2022-0998
Malicious code in bioql PyPI...
EUVD-2022-0518
Malicious code in bioql PyPI...
EUVD-2022-2687
Malicious code in bioql PyPI...
EUVD-2022-6299
Malicious code in bioql PyPI...
EUVD-2023-2194
Malicious code in bioql PyPI...
EUVD-2022-6165
Malicious code in bioql PyPI...