https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:35:11.116471+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-55654 cnvd-2022-55654 2026-10-03T10:35:11.120514+00:00 cnvd-2022-55654 https://cve.radiocsirt.org/vuln/euvd-2026-17805 EUVD-2026-17805 2026-10-03T10:35:11.120546+00:00 EUVD-2026-17805 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34213 fkie_cve-2022-34213 2026-10-03T10:35:11.120561+00:00

Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-9h79-5m2f-mqj2 GHSA-9h79-5m2f-mqj2 — Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text 2026-10-03T10:35:11.120588+00:00

Affected: Maven: org.jenkins-ci.plugins:squashtm-publisher

Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier stores passwords unencrypted in its global configuration file `org.jenkinsci.squashtm.core.SquashTMPublisher.xml` on the Jenkins controller as part of its configuration.

These passwords can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2022-34213 gsd-2022-34213 2026-10-03T10:35:11.120614+00:00 gsd-2022-34213 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445 WID-SEC-W-2022-0445 — Jenkins: Mehrere Schwachstellen 2026-10-03T10:35:11.120626+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.