https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:47:05.142604+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-49798 cnvd-2022-49798 2026-10-03T09:47:05.187053+00:00 cnvd-2022-49798 https://cve.radiocsirt.org/vuln/euvd-2026-17779 EUVD-2026-17779 2026-10-03T09:47:05.187091+00:00 EUVD-2026-17779 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34180 fkie_cve-2022-34180 2026-10-03T09:47:05.187106+00:00

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for "unprotected" status badge access, allowing attackers without any permissions to obtain the build status badge icon for any attacker-specified job and/or build.

 https://cve.radiocsirt.org/vuln/ghsa-xxhf-xq6v-c8mj GHSA-xxhf-xq6v-c8mj — Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement 2026-10-03T09:47:05.187139+00:00

Affected: Maven: org.jenkins-ci.plugins:embeddable-build-status

Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for \"unprotected\" status badge access.

This allows attackers without any permissions to obtain the build status badge icon for any attacker-specified job and/or build.

Embeddable Build Status Plugin 2.0.4 requires ViewStatus permission to obtain the build status badge icon.

 https://cve.radiocsirt.org/vuln/gsd-2022-34180 gsd-2022-34180 2026-10-03T09:47:05.187169+00:00 gsd-2022-34180 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445 WID-SEC-W-2022-0445 — Jenkins: Mehrere Schwachstellen 2026-10-03T09:47:05.187181+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.