https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:44:24.516793+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-197074 EUVD-2026-197074 2026-10-02T18:44:24.572836+00:00 EUVD-2026-197074 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39154 fkie_cve-2023-39154 2026-10-02T18:44:24.572871+00:00

Incorrect permission checks in Jenkins Qualys Web App Scanning Connector Plugin 2.0.10 and earlier allow attackers with global Item/Configure permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-8wgf-3mrj-73x7 GHSA-8wgf-3mrj-73x7 — Incorrect permission checks in Qualys Web App Scanning Connector Plugin allow capturing credentials 2026-10-02T18:44:24.572904+00:00

Affected: Maven: com.qualys.plugins:qualys-was

Qualys Web App Scanning Connector Plugin 2.0.10 and earlier does not correctly perform permission checks in several HTTP endpoints.

This allows attackers with global Item/Configure permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Qualys Web App Scanning Connector Plugin 2.0.11 requires the appropriate permissions for the affected HTTP endpoints.

 https://cve.radiocsirt.org/vuln/gsd-2023-39154 gsd-2023-39154 2026-10-02T18:44:24.572932+00:00 gsd-2023-39154 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1902 WID-SEC-W-2023-1902 — Jenkins: Mehrere Schwachstellen 2026-10-02T18:44:24.572945+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.