Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:08:38 +0000 EUVD-2026-226578 https://cve.radiocsirt.org/vuln/euvd-2026-226578 EUVD-2026-226578 https://cve.radiocsirt.org/vuln/euvd-2026-226578 fkie_cve-2023-24450 https://cve.radiocsirt.org/vuln/fkie_cve-2023-24450 <p>Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.</p> <p>Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-24450 GHSA-6hw7-x86v-wrgf — Passwords stored in plain text by Jenkins view-cloner Plugin https://cve.radiocsirt.org/vuln/ghsa-6hw7-x86v-wrgf <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:view-cloner</p> <p>Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:view-cloner</p> <p>Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/ghsa-6hw7-x86v-wrgf gsd-2023-24450 https://cve.radiocsirt.org/vuln/gsd-2023-24450 gsd-2023-24450 https://cve.radiocsirt.org/vuln/gsd-2023-24450 WID-SEC-W-2023-0193 — Jenkins Plugins: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0193 <p>Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0193