https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T23:57:30.476918+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-34859 cnvd-2019-34859 2026-10-14T23:57:30.536746+00:00 cnvd-2019-34859 https://cve.radiocsirt.org/vuln/euvd-2026-53645 EUVD-2026-53645 2026-10-14T23:57:30.536781+00:00 EUVD-2026-53645 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10411 fkie_cve-2019-10411 2026-10-14T23:57:30.536795+00:00

Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

 https://cve.radiocsirt.org/vuln/ghsa-pxv2-mfq7-vhp6 GHSA-pxv2-mfq7-vhp6 — Jenkins Inedo BuildMaster Plugin showed plain text password in configuration form 2026-10-14T23:57:30.536824+00:00

Affected: Maven: com.inedo.proget:inedo-proget

Jenkins Inedo BuildMaster Plugin Plugin stores a service password in its global Jenkins configuration.

While the password is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the password through browser extensions, cross-site scripting vulnerabilities, and similar situations.

Inedo BuildMaster Plugin Plugin now encrypts the password transmitted to administrators viewing the global configuration form.

 https://cve.radiocsirt.org/vuln/gsd-2019-10411 gsd-2019-10411 2026-10-14T23:57:30.536850+00:00 gsd-2019-10411