https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:03:06.820017+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223449 EUVD-2026-223449 2026-10-03T12:03:06.899252+00:00 EUVD-2026-223449 https://cve.radiocsirt.org/vuln/fkie_cve-2023-23850 fkie_cve-2023-23850 2026-10-03T12:03:06.899290+00:00

A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-jwr6-75xh-jh5j GHSA-jwr6-75xh-jh5j — Synopsys Jenkins Coverity Plugin has Incorrect Default Permissions 2026-10-03T12:03:06.899322+00:00

Affected: Maven: org.jenkins-ci.plugins:synopsys-coverity

Synopsys Coverity Plugin 3.0.2 and earlier does not perform permission checks in several HTTP endpoints.

This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

An enumeration of credentials IDs in Synopsys Coverity Plugin 3.0.3 requires the appropriate permissions.

 https://cve.radiocsirt.org/vuln/gsd-2023-23850 gsd-2023-23850 2026-10-03T12:03:06.899349+00:00 gsd-2023-23850 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0397 WID-SEC-W-2023-0397 — Jenkins: Mehrere Schwachstellen 2026-10-03T12:03:06.899362+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.