https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:38:53.146315+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-226578 EUVD-2026-226578 2026-10-08T14:38:53.149601+00:00 EUVD-2026-226578 https://cve.radiocsirt.org/vuln/fkie_cve-2023-24450 fkie_cve-2023-24450 2026-10-08T14:38:53.149632+00:00

Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-6hw7-x86v-wrgf GHSA-6hw7-x86v-wrgf — Passwords stored in plain text by Jenkins view-cloner Plugin 2026-10-08T14:38:53.149663+00:00

Affected: Maven: org.jenkins-ci.plugins:view-cloner

Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2023-24450 gsd-2023-24450 2026-10-08T14:38:53.149688+00:00 gsd-2023-24450 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0193 WID-SEC-W-2023-0193 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-08T14:38:53.149700+00:00

Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.