https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:31:29.637489+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03901 bdu:2023-03901 2026-10-04T00:31:29.640962+00:00 bdu:2023-03901 https://cve.radiocsirt.org/vuln/euvd-2026-196502 EUVD-2026-196502 2026-10-04T00:31:29.640993+00:00 EUVD-2026-196502 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32262 fkie_cve-2023-32262 2026-10-04T00:31:29.641008+00:00

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Item/Configure permission to access and capture credentials they are not entitled to. See the following Jenkins security advisory for details: * https://www.jenkins.io/security/advisory/2023-06-14/ https://www.jenkins.io/security/advisory/2023-06-14/

 https://cve.radiocsirt.org/vuln/ghsa-px39-5h8c-j3c8 GHSA-px39-5h8c-j3c8 — Exposure of system-scoped credentials in Jenkins Dimensions Plugin 2026-10-04T00:31:29.641036+00:00

Affected: Maven: org.jenkins-ci.plugins:dimensionsscm

Dimensions Plugin 0.9.3 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration.

This allows attackers with Item/Configure permission to access and capture credentials they are not entitled to.

Dimensions Plugin 0.9.3.1 defines the appropriate context for credentials lookup.

 https://cve.radiocsirt.org/vuln/gsd-2023-32262 gsd-2023-32262 2026-10-04T00:31:29.641061+00:00 gsd-2023-32262 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1471 WID-SEC-W-2023-1471 — Jenkins Core und Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T00:31:29.641073+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.