https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T18:01:45.255789+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-35795 EUVD-2026-35795 2026-10-28T18:01:45.338906+00:00 EUVD-2026-35795 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2107 fkie_cve-2020-2107 2026-10-28T18:01:45.338959+00:00

Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

 https://cve.radiocsirt.org/vuln/ghsa-xr37-pjfh-qwwc GHSA-xr37-pjfh-qwwc — Fortify Plugin stored credentials in plain text 2026-10-28T18:01:45.339002+00:00

Affected: Maven: org.jenkins-ci.plugins:fortify

Fortify Plugin 19.1.29 and earlier stored its proxy server password unencrypted in job `config.xml` files. This password could be read by users with the Extended Read permission.

Fortify Plugin 19.2.30 now encrypts the proxy server password.

 https://cve.radiocsirt.org/vuln/gsd-2020-2107 gsd-2020-2107 2026-10-28T18:01:45.339040+00:00 gsd-2020-2107