Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:01:43 +0000 EUVD-2026-236062 https://cve.radiocsirt.org/vuln/euvd-2026-236062 EUVD-2026-236062 https://cve.radiocsirt.org/vuln/euvd-2026-236062 fkie_cve-2022-45384 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45384 <p>Jenkins Reverse Proxy Auth Plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.</p> <p>Jenkins Reverse Proxy Auth Plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-45384 GHSA-wcjj-qm5v-j4pc — Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords https://cve.radiocsirt.org/vuln/ghsa-wcjj-qm5v-j4pc <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:reverse-proxy-auth-plugin</p> <p>Jenkins Reverse Proxy Auth Plugin versions 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:reverse-proxy-auth-plugin</p> <p>Jenkins Reverse Proxy Auth Plugin versions 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/ghsa-wcjj-qm5v-j4pc gsd-2022-45384 https://cve.radiocsirt.org/vuln/gsd-2022-45384 gsd-2022-45384 https://cve.radiocsirt.org/vuln/gsd-2022-45384 WID-SEC-W-2022-2056 — Jenkins: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2056 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2056