Skip to content
OpenAdvisories

Vendor

Black Duck

7 known vulnerabilities.

Products

Coverity 2 blackduck-c-cpp 2 Coverity Connect 2 Black Duck SCA 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-76055

    Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackd…

    Black Duck blackduck-c-cpp
  • High 7.1
    CVE-2026-76054

    Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an …

    Black Duck blackduck-c-cpp
  • High 8.7
    CVE-2026-8339

    SQL Injection in Coverity Connect SOAP API

    A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclusive). A malicious, authenticated threat actor who sends a specially crafted payload can achieve full read access to database contents and o…

    Black Duck Coverity Connect
  • High 8.5
    CVE-2024-12021

    Stored Cross-Site Scripting

    Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard …

    Black Duck Coverity