https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:53:24.409044+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04852 bdu:2022-04852 2026-10-02T19:53:24.515660+00:00 bdu:2022-04852 https://cve.radiocsirt.org/vuln/euvd-2026-18678 EUVD-2026-18678 2026-10-02T19:53:24.515694+00:00 EUVD-2026-18678 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36901 fkie_cve-2022-36901 2026-10-02T19:53:24.515709+00:00

Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-2qh6-hhvv-m2ww GHSA-2qh6-hhvv-m2ww — Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted 2026-10-02T19:53:24.515738+00:00

Affected: Maven: org.jenkins-ci.plugins:http_request

HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file `jenkins.plugins.http_request.HttpRequest.xml` on the Jenkins controller as part of its configuration when using (deprecated) Basic/Digest Authentication. These passwords can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2022-36901 gsd-2022-36901 2026-10-02T19:53:24.515763+00:00 gsd-2022-36901 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0852 WID-SEC-W-2022-0852 — Jenkins: Mehrere Schwachstellen 2026-10-02T19:53:24.515775+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren