https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:36:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01178 bdu:2024-01178 https://cve.radiocsirt.org/vuln/bdu:2024-01178 https://cve.radiocsirt.org/vuln/euvd-2026-217057 EUVD-2026-217057 https://cve.radiocsirt.org/vuln/euvd-2026-217057 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6147 <p>Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize the plugin and configure potential a rouge endpoint via which it was possible to control response for certain request which could be injected with XXE payloads leading to XXE while processing the response data</p> <p>Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize the plugin and configure potential a rouge endpoint via which it was possible to control response for certain request which could be injected with XXE payloads leading to XXE while processing the response data</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6147 https://cve.radiocsirt.org/vuln/ghsa-8525-52vg-jv6v <p><strong>Affected:</strong> Maven: com.qualys.plugins:qualys-pc</p> <p>Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize the plugin and configure potential a rouge endpoint via which it was possible to control response for certain request which could be injected with XXE payloads leading to XXE while processing the response data</p> <p><strong>Affected:</strong> Maven: com.qualys.plugins:qualys-pc</p> <p>Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize the plugin and configure potential a rouge endpoint via which it was possible to control response for certain request which could be injected with XXE payloads leading to XXE while processing the response data</p> https://cve.radiocsirt.org/vuln/ghsa-8525-52vg-jv6v https://cve.radiocsirt.org/vuln/gsd-2023-6147 gsd-2023-6147 https://cve.radiocsirt.org/vuln/gsd-2023-6147 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0058 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Jenkins plugin &#34;Qualys Policy Compliance&#34; ausnutzen, um Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Jenkins plugin &#34;Qualys Policy Compliance&#34; ausnutzen, um Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0058