EUVD-2022-3741

Malicious code in bioql PyPI...

EUVD-2022-5971

Malicious code in bioql PyPI...

EUVD-2022-3862

Malicious code in bioql PyPI...

EUVD-2022-2208

Malicious code in bioql PyPI...

EUVD-2022-3266

Malicious code in bioql PyPI...

EUVD-2023-1583

Malicious code in bioql PyPI...

EUVD-2022-4899

Malicious code in bioql PyPI...

EUVD-2022-3802

Malicious code in bioql PyPI...

EUVD-2022-5477

Malicious code in bioql PyPI...

EUVD-2023-1354

Malicious code in bioql PyPI...

EUVD-2022-6002

Malicious code in bioql PyPI...

EUVD-2022-3550

Malicious code in bioql PyPI...

EUVD-2022-3546

Malicious code in bioql PyPI...

EUVD-2023-2209

Malicious code in bioql PyPI...

EUVD-2022-2145

Malicious code in bioql PyPI...

Jenkins is missing a permission check in the authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

GHSA-223M-4RFP-646H Jenkins is missing a permission check in the authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

Missing permission check in authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

CVE-2025-58459

Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs...

CVE-2025-58460

A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b92bcd64 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...