https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T07:15:51.209999+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-70266 cnvd-2020-70266 2026-10-13T07:15:51.212869+00:00 cnvd-2020-70266 https://cve.radiocsirt.org/vuln/euvd-2026-35998 EUVD-2026-35998 2026-10-13T07:15:51.212897+00:00 EUVD-2026-35998 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2312 fkie_cve-2020-2312 2026-10-13T07:15:51.212912+00:00

Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in build logs.

 https://cve.radiocsirt.org/vuln/ghsa-rwh3-5g7v-3c5m GHSA-rwh3-5g7v-3c5m — Password written to the build log by Jenkins SQLPlus Script Runner Plugin 2026-10-13T07:15:51.212938+00:00

Affected: Maven: org.jenkins-ci.plugins:sqlplus-script-runner

Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier prints the `sqlplus` command invocation to the build logs.

This log message does not redact a password provided as part of a command line argument. This password can be viewed by users with Item/Read permission.

Jenkins SQLPlus Script Runner Plugin 2.0.13 no longer prints the password in the build logs.

 https://cve.radiocsirt.org/vuln/gsd-2020-2312 gsd-2020-2312 2026-10-13T07:15:51.212962+00:00 gsd-2020-2312