https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T13:23:02.940586+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-28233 cnvd-2019-28233 2026-10-15T13:23:03.013570+00:00 cnvd-2019-28233 https://cve.radiocsirt.org/vuln/euvd-2026-53569 EUVD-2026-53569 2026-10-15T13:23:03.013617+00:00 EUVD-2026-53569 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10387 fkie_cve-2019-10387 2026-10-15T13:23:03.013639+00:00

A missing permission check in Jenkins XL TestView Plugin 1.2.0 and earlier in XLTestView.XLTestDescriptor#doTestConnection allows users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-vf2c-w49g-3xf3 GHSA-vf2c-w49g-3xf3 — Missing permission check in Jenkins XL TestView Plugin 2026-10-15T13:23:03.013688+00:00

Affected: Maven: com.xebialabs.xlt.ci:xltestview-plugin

A missing permission check in Jenkins XL TestView Plugin 1.2.0 and earlier in XLTestView.XLTestDescriptor#doTestConnection allows users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/gsd-2019-10387 gsd-2019-10387 2026-10-15T13:23:03.013732+00:00 gsd-2019-10387