https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T04:40:09.298932+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-20407 cnvd-2020-20407 2026-10-28T04:40:09.302067+00:00 cnvd-2020-20407 https://cve.radiocsirt.org/vuln/euvd-2026-179828 EUVD-2026-179828 2026-10-28T04:40:09.302099+00:00 EUVD-2026-179828 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1003021 fkie_cve-2019-1003021 2026-10-28T04:40:09.302114+00:00

An exposure of sensitive information vulnerability exists in Jenkins OpenId Connect Authentication Plugin 1.4 and earlier in OicSecurityRealm/config.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser (e.g. malicious extension) to retrieve the configured client secret.

 https://cve.radiocsirt.org/vuln/ghsa-3858-58w9-wpcg GHSA-3858-58w9-wpcg — Jenkins OpenId Connect Authentication Plugin showed plain text client secret in configuration form 2026-10-28T04:40:09.302141+00:00

Affected: Maven: org.jenkins-ci.plugins:oic-auth

An exposure of sensitive information vulnerability exists in Jenkins OpenId Connect Authentication Plugin 1.4 and earlier in OicSecurityRealm/config.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser (e.g. malicious extension) to retrieve the configured client secret.

 https://cve.radiocsirt.org/vuln/gsd-2019-1003021 gsd-2019-1003021 2026-10-28T04:40:09.302166+00:00 gsd-2019-1003021