https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:00:45.783287+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08570 bdu:2025-08570 2026-10-05T16:00:45.786577+00:00 bdu:2025-08570 https://cve.radiocsirt.org/vuln/euvd-2026-260008 EUVD-2026-260008 2026-10-05T16:00:45.786610+00:00 EUVD-2026-260008 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53670 fkie_cve-2025-53670 2026-10-05T16:00:45.786625+00:00

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-45hr-8gq6-7f7f GHSA-45hr-8gq6-7f7f — Jenkins Nouvola DiveCloud Plugin vulnerability stores unencrypted credentials 2026-10-05T16:00:45.786653+00:00

Affected: Maven: org.jenkins-ci.plugins:nouvola-divecloud

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521 WID-SEC-W-2025-1521 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T16:00:45.786676+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.