https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:21:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-226174 EUVD-2026-226174 https://cve.radiocsirt.org/vuln/euvd-2026-226174 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28155 <p>Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.</p> <p>Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-28155 https://cve.radiocsirt.org/vuln/ghsa-xxv9-w5hm-328j <p><strong>Affected:</strong> Maven: com.rapid7:jenkinsci-appspider-plugin</p> <p>Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.</p> <p><strong>Affected:</strong> Maven: com.rapid7:jenkinsci-appspider-plugin</p> <p>Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.</p> https://cve.radiocsirt.org/vuln/ghsa-xxv9-w5hm-328j https://cve.radiocsirt.org/vuln/gsd-2024-28155 gsd-2024-28155 https://cve.radiocsirt.org/vuln/gsd-2024-28155 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0564 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0564