310 matches found
CVE-2025-64149
CVE-2025-64149 involves the Jenkins Publish to Bitbucket Plugin (versions 0.4 and earlier) with a CSRF vulnerability via an HTTP endpoint. An attacker with Overall/Read permission can initiate requests to an attacker-controlled URL using credentials IDs obtained through other means, potentially c...
CVE-2025-64138
The CVE-2025-64138 entry concerns Jenkins Start Windocks Containers Plugin (versions 1.4 and earlier). The issue is a CSRF vulnerability in an HTTP endpoint that allows attackers with Overall/Read permission to trigger connections to an attacker-specified URL, even without POST requests. Multiple...
CVE-2025-64138
A cross-site request forgery CSRF vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL...
CVE-2025-64136
The vulnerability CVE-2025-64136 affects Jenkins Themis Plugin versions 1.4.1 and earlier. Root cause: a cross-site request forgery (CSRF) flaw due to lack of permission checks in an HTTP endpoint, allowing an attacker with Overall/Read permission to trigger requests to an attacker-specified URL/...
EUVD-2022-0518
Malicious code in bioql PyPI...
EUVD-2023-2170
Malicious code in bioql PyPI...
EUVD-2022-5810
Malicious code in bioql PyPI...
EUVD-2022-1207
Malicious code in bioql PyPI...
EUVD-2022-6299
Malicious code in bioql PyPI...
EUVD-2022-0524
Malicious code in bioql PyPI...
EUVD-2023-1523
Malicious code in bioql PyPI...
EUVD-2023-1991
Malicious code in bioql PyPI...
EUVD-2022-3369
Malicious code in bioql PyPI...
EUVD-2022-2703
Malicious code in bioql PyPI...
EUVD-2022-2837
Malicious code in bioql PyPI...
EUVD-2022-3396
Malicious code in bioql PyPI...
EUVD-2023-2099
Malicious code in bioql PyPI...
EUVD-2022-6130
Malicious code in bioql PyPI...