CVE-2026-76346

CVE-2026-76346 is a stored XSS in Splunk Enterprise (versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14) caused by Splunk Web failing to escape tooltip values in dashboard sparkline format options. A user with the "power" role can inject a malicious script that executes in the browser of another u...

EUVD-2023-34991

Malicious code in bioql PyPI...

PT-2020-15490 · Jenkins · Jenkins Coverage/Complexity Scatter Plot Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Coverage/Complexity Scatter Plot Plugin versions 1.1.1 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the plugin does not escape the method information in tooltips,...

PT-2020-15457 · Jenkins · Jenkins Yet Another Build Visualizer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Yet Another Build Visualizer Plugin versions 1.11 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. This occurs because the plugin does not escape tooltip content, allowing users with...