https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:25:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04852 bdu:2022-04852 https://cve.radiocsirt.org/vuln/bdu:2022-04852 https://cve.radiocsirt.org/vuln/euvd-2026-18678 EUVD-2026-18678 https://cve.radiocsirt.org/vuln/euvd-2026-18678 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36901 <p>Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.</p> <p>Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-36901 https://cve.radiocsirt.org/vuln/ghsa-2qh6-hhvv-m2ww <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:http_request</p> <p>HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file `jenkins.plugins.http_request.HttpRequest.xml` on the Jenkins controller as part of its configuration when using (deprecated) Basic/Digest Authentication. These passwords can be viewed by users with access to the Jenkins controller file system.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:http_request</p> <p>HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file `jenkins.plugins.http_request.HttpRequest.xml` on the Jenkins controller as part of its configuration when using (deprecated) Basic/Digest Authentication. These passwords can be viewed by users with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/ghsa-2qh6-hhvv-m2ww https://cve.radiocsirt.org/vuln/gsd-2022-36901 gsd-2022-36901 https://cve.radiocsirt.org/vuln/gsd-2022-36901 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0852 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0852