https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:58:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-06414 bdu:2023-06414 https://cve.radiocsirt.org/vuln/bdu:2023-06414 https://cve.radiocsirt.org/vuln/euvd-2026-193925 EUVD-2026-193925 https://cve.radiocsirt.org/vuln/euvd-2026-193925 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40347 <p>Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.</p> <p>Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-40347 https://cve.radiocsirt.org/vuln/ghsa-97mg-9jhf-r7rm <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:maven-artifact-choicelistprovider</p> <p>Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration.</p> <p>This allows attackers with Item/Configure permission to access and capture credentials they are not entitled to.</p> <p>As of publication of this advisory, there is no fix.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:maven-artifact-choicelistprovider</p> <p>Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration.</p> <p>This allows attackers with Item/Configure permission to access and capture credentials they are not entitled to.</p> <p>As of publication of this advisory, there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-97mg-9jhf-r7rm https://cve.radiocsirt.org/vuln/gsd-2023-40347 gsd-2023-40347 https://cve.radiocsirt.org/vuln/gsd-2023-40347 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2088 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2088