https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:02:24.325706+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-49792 cnvd-2022-49792 2026-10-03T07:02:24.329416+00:00 cnvd-2022-49792 https://cve.radiocsirt.org/vuln/euvd-2026-17795 EUVD-2026-17795 2026-10-03T07:02:24.329447+00:00 EUVD-2026-17795 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34199 fkie_cve-2022-34199 2026-10-03T07:02:24.329461+00:00

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-c8mf-mc3f-2wvc GHSA-c8mf-mc3f-2wvc — Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin 2026-10-03T07:02:24.329488+00:00

Affected: Maven: com.convertigo.jenkins.plugins:convertigo-mobile-platform

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job `config.xml` files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2022-34199 gsd-2022-34199 2026-10-03T07:02:24.329512+00:00 gsd-2022-34199 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445 WID-SEC-W-2022-0445 — Jenkins: Mehrere Schwachstellen 2026-10-03T07:02:24.329523+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.