https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:15:42.680702+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-49803 cnvd-2022-49803 2026-10-04T07:15:42.686407+00:00 cnvd-2022-49803 https://cve.radiocsirt.org/vuln/euvd-2026-16779 EUVD-2026-16779 2026-10-04T07:15:42.686448+00:00 EUVD-2026-16779 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30971 fkie_cve-2022-30971 2026-10-04T07:15:42.686462+00:00

Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-wqmp-2p5r-rhfv GHSA-wqmp-2p5r-rhfv — XML External Entity Reference in Jenkins Storable Configs Plugin 2026-10-04T07:15:42.686492+00:00

Affected: Maven: org.jvnet.hudson.plugins:storable-configs-plugin

Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

This allows attackers with Item/Configure permission to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.

 https://cve.radiocsirt.org/vuln/gsd-2022-30971 gsd-2022-30971 2026-10-04T07:15:42.686517+00:00 gsd-2022-30971 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0090 WID-SEC-W-2023-0090 — Jenkins: Mehrere Schwachstellen 2026-10-04T07:15:42.686529+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.