https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:06:00.331808+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-79926 cnvd-2022-79926 2026-10-02T22:06:00.462082+00:00 cnvd-2022-79926 https://cve.radiocsirt.org/vuln/euvd-2026-15971 EUVD-2026-15971 2026-10-02T22:06:00.462147+00:00 EUVD-2026-15971 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29036 fkie_cve-2022-29036 2026-10-02T22:06:00.462171+00:00

Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-rvg5-f5fj-mxvg GHSA-rvg5-f5fj-mxvg — Cross-site Scripting in Jenkins Credentials Plugin 2026-10-02T22:06:00.462218+00:00

Affected: Maven: org.jenkins-ci.plugins:credentials

Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/gsd-2022-29036 gsd-2022-29036 2026-10-02T22:06:00.462259+00:00 gsd-2022-29036 https://cve.radiocsirt.org/vuln/rhsa-2022:0871 RHSA-2022:0871 — Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update 2026-10-02T22:06:00.462278+00:00

CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter workflow-cps: OS command execution through crafted SCM contents workflow-cps-global-lib: OS command execution through crafted SCM contents workflow-multibranch: OS command execution through crafted SCM contents workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-multibranch: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps: Password parameters are included from the original build in replayed builds workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability pipeline-build-step: Password parameter default values exposed credentials: Stored XSS vulnerabilities in jenkins plugin subversion: Stored XSS vulnerabilities in Jenkins subversion plugin

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0265 WID-SEC-W-2022-0265 — Jenkins: Mehrere Schwachstellen 2026-10-02T22:06:00.462344+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und Dateien zu manipulieren.