https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:08:34.316994+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-211544 EUVD-2026-211544 2026-10-03T15:08:34.379147+00:00 EUVD-2026-211544 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33000 fkie_cve-2023-33000 2026-10-03T15:08:34.379186+00:00

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier does not mask credentials displayed on the configuration form, increasing the potential for attackers to observe and capture them.

 https://cve.radiocsirt.org/vuln/ghsa-gqxr-hvrw-6hfh GHSA-gqxr-hvrw-6hfh — Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking 2026-10-03T15:08:34.379231+00:00

Affected: Maven: io.jenkins.plugins:cavisson-ns-nd-integration

Jenkins NS-ND Integration Performance Publisher Plugin stores credentials in job config.xml files on the Jenkins controller as part of its configuration.

While these credentials are stored encrypted on disk, in NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier, the job configuration form does not mask these credentials, increasing the potential for attackers to observe and capture them.

NS-ND Integration Performance Publisher Plugin 4.11.0.48 masks credentials displayed on the configuration form.

 https://cve.radiocsirt.org/vuln/gsd-2023-33000 gsd-2023-33000 2026-10-03T15:08:34.379262+00:00 gsd-2023-33000 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1228 WID-SEC-W-2023-1228 — Jenkins Plugins: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-03T15:08:34.379275+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site-Scripting-Angriff-durchzuführen, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Request-Forgery-Angriff durchzuführen.