Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:44:22 +0000 bdu:2022-04867 https://cve.radiocsirt.org/vuln/bdu:2022-04867 bdu:2022-04867 https://cve.radiocsirt.org/vuln/bdu:2022-04867 EUVD-2026-18656 https://cve.radiocsirt.org/vuln/euvd-2026-18656 EUVD-2026-18656 https://cve.radiocsirt.org/vuln/euvd-2026-18656 fkie_cve-2022-36898 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36898 <p>A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.</p> <p>A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-36898 GHSA-cp5r-xqjr-84gm — Jenkins Compuware ISPW Operations Plugin does not perform permission checks in several HTTP endpoints https://cve.radiocsirt.org/vuln/ghsa-cp5r-xqjr-84gm <p><strong>Affected:</strong> Maven: com.compuware.jenkins:compuware-ispw-operations</p> <p>Jenkins BMC AMI DevX Code Pipeline Operations Plugin 1.0.8 and earlier does not perform permission checks in several HTTP endpoints.</p> <p>This allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Those credentials IDs can be used as part of an attack to capture the credentials using another vulnerability.</p> <p>BMC AMI DevX Code Pipeline Operations Plugin 1.0.9 requires the appropriate permissions to enumerate hosts and ports of Compuware configurations and credentials IDs.</p> <p><strong>Affected:</strong> Maven: com.compuware.jenkins:compuware-ispw-operations</p> <p>Jenkins BMC AMI DevX Code Pipeline Operations Plugin 1.0.8 and earlier does not perform permission checks in several HTTP endpoints.</p> <p>This allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Those credentials IDs can be used as part of an attack to capture the credentials using another vulnerability.</p> <p>BMC AMI DevX Code Pipeline Operations Plugin 1.0.9 requires the appropriate permissions to enumerate hosts and ports of Compuware configurations and credentials IDs.</p> https://cve.radiocsirt.org/vuln/ghsa-cp5r-xqjr-84gm gsd-2022-36898 https://cve.radiocsirt.org/vuln/gsd-2022-36898 gsd-2022-36898 https://cve.radiocsirt.org/vuln/gsd-2022-36898 WID-SEC-W-2022-0852 — Jenkins: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0852 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0852