https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T16:34:02.227724+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-243088 EUVD-2026-243088 2026-10-10T16:34:02.230831+00:00 EUVD-2026-243088 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49673 fkie_cve-2023-49673 2026-10-10T16:34:02.230864+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.

 https://cve.radiocsirt.org/vuln/ghsa-wpfc-r5qq-7r7p GHSA-wpfc-r5qq-7r7p — Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability 2026-10-10T16:34:02.230895+00:00

Affected: Maven: io.jenkins.plugins:neuvector-vulnerability-scanner

Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier does not perform a permission check in a connection test HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password. Additionally, this HTTP endpoint does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

NeuVector Vulnerability Scanner Plugin 2.2 requires POST requests and Overall/Administer permission for the affected HTTP endpoint.

 https://cve.radiocsirt.org/vuln/gsd-2023-49673 gsd-2023-49673 2026-10-10T16:34:02.230923+00:00 gsd-2023-49673 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3030 WID-SEC-W-2023-3030 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-10T16:34:02.230935+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Informationen offenzulegen, seine Privilegien zu erweitern oder Dateien zu manipulieren.