https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:39:58.157385+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04853 bdu:2022-04853 2026-10-03T01:39:58.161102+00:00 bdu:2022-04853 https://cve.radiocsirt.org/vuln/euvd-2026-18683 EUVD-2026-18683 2026-10-03T01:39:58.161133+00:00 EUVD-2026-18683 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36896 fkie_cve-2022-36896 2026-10-03T01:39:58.161146+00:00

A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-75fc-fv3p-xh82 GHSA-75fc-fv3p-xh82 — Jenkins Compuware Source Code Download is missing authorization 2026-10-03T01:39:58.161174+00:00

Affected: Maven: com.compuware.jenkins:compuware-scm-downloader

BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier does not perform permission checks in several HTTP endpoints.

This allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Those credentials IDs can be used as part of an attack to capture the credentials using another vulnerability.

BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.13 requires the appropriate permissions to enumerate hosts and ports of Compuware configurations and credentials IDs.

 https://cve.radiocsirt.org/vuln/gsd-2022-36896 gsd-2022-36896 2026-10-03T01:39:58.161200+00:00 gsd-2022-36896 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0852 WID-SEC-W-2022-0852 — Jenkins: Mehrere Schwachstellen 2026-10-03T01:39:58.161213+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren