https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:56:26.605714+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07224 bdu:2023-07224 2026-10-06T09:56:26.609338+00:00 bdu:2023-07224 https://cve.radiocsirt.org/vuln/euvd-2026-185925 EUVD-2026-185925 2026-10-06T09:56:26.609373+00:00 EUVD-2026-185925 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46651 fkie_cve-2023-46651 2026-10-06T09:56:26.609388+00:00

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1.

 https://cve.radiocsirt.org/vuln/ghsa-66hv-fhcm-7xm7 GHSA-66hv-fhcm-7xm7 — Jenkins Warnings Plugin exposures system-scoped credentials 2026-10-06T09:56:26.609417+00:00

Affected: Maven: io.jenkins.plugins:warnings-ng

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing the use of system-scoped credentials otherwise reserved for the global configuration.

This allows attackers with Item/Configure permission to access and capture credentials they are not entitled to.

Warnings Plugin 10.5.1 defines the appropriate context for credentials lookup. This fix has been backported to 10.4.1.

 https://cve.radiocsirt.org/vuln/gsd-2023-46651 gsd-2023-46651 2026-10-06T09:56:26.609446+00:00 gsd-2023-46651 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2750 WID-SEC-W-2023-2750 — Jenkins: Mehrere Schwachstellen 2026-10-06T09:56:26.609458+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.