https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:27:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-238534 EUVD-2026-238534 https://cve.radiocsirt.org/vuln/euvd-2026-238534 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43426 <p>Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.</p> <p>Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-43426 https://cve.radiocsirt.org/vuln/ghsa-mf4p-wjrm-cmjp <p><strong>Affected:</strong> Maven: io.jenkins.plugins:s3explorer</p> <p>S3 Explorer Plugin stores AWS_SECRET_ACCESS_KEY in its global configuration file `s3explorer.xml` on the Jenkins controller as part of its configuration.</p> <p>While this secret is stored encrypted on disk, in S3 Explorer Plugin 1.0.8 and earlier the global configuration form does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.</p> <p><strong>Affected:</strong> Maven: io.jenkins.plugins:s3explorer</p> <p>S3 Explorer Plugin stores AWS_SECRET_ACCESS_KEY in its global configuration file `s3explorer.xml` on the Jenkins controller as part of its configuration.</p> <p>While this secret is stored encrypted on disk, in S3 Explorer Plugin 1.0.8 and earlier the global configuration form does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.</p> https://cve.radiocsirt.org/vuln/ghsa-mf4p-wjrm-cmjp https://cve.radiocsirt.org/vuln/gsd-2022-43426 gsd-2022-43426 https://cve.radiocsirt.org/vuln/gsd-2022-43426 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1804 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1804