EUVD-2016-2613

Malware in sbrugna...

EUVD-2005-2962

Malware in sbrugna...

EUVD-2020-26880

Malware in sbrugna...

EUVD-2016-10156

Malware in sbrugna...

EUVD-2000-0527

Malware in sbrugna...

EUVD-2020-17065

Malware in sbrugna...

EUVD-1999-1106

Malware in sbrugna...

EUVD-2023-37430

Malicious code in bioql PyPI...

EUVD-2022-4400

Malicious code in bioql PyPI...

EUVD-2023-2596

Malicious code in bioql PyPI...

EUVD-2021-9943

Malicious code in bioql PyPI...

EUVD-2022-2643

Malicious code in bioql PyPI...

EUVD-2022-3366

Malicious code in bioql PyPI...

EUVD-2021-8916

Malicious code in bioql PyPI...

EUVD-2022-4433

Malicious code in bioql PyPI...

GHSA-P9GH-RPJW-78QG Jenkins QMetry Test Management Plugin stores unencrypted API keys

QMetry Test Management Plugin 1.13 and earlier stores Qmetry Automation API Keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

GHSA-3C9F-C64M-H4WC Jenkins Statistics Gatherer Plugin vulnerability exposes AWS Secret Key

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration file org.jenkins.plugins.statistics.gatherer.StatisticsConfiguration.xml on the Jenkins controller as part of its configuration. This key can be viewed by users with access to th...

CVE-2025-30167 Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration...

CVE-2024-36496

The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file. The application hashes this five-character password with the outdated and broken MD5 algorithm no salt and uses the first five bytes as the key for RC...

CVE-2019-1003066

Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...