https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:22:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08318 bdu:2025-08318 https://cve.radiocsirt.org/vuln/bdu:2025-08318 https://cve.radiocsirt.org/vuln/euvd-2026-260001 EUVD-2026-260001 https://cve.radiocsirt.org/vuln/euvd-2026-260001 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53663 <p>Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> <p>Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53663 https://cve.radiocsirt.org/vuln/ghsa-pgrx-5f8q-r5mq <p><strong>Affected:</strong> Maven: com.ibm.devops:ibm-cloud-devops</p> <p>Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.</p> <p>These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> <p>As of publication of this advisory, there is no fix.</p> <p><strong>Affected:</strong> Maven: com.ibm.devops:ibm-cloud-devops</p> <p>Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.</p> <p>These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> <p>As of publication of this advisory, there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-pgrx-5f8q-r5mq https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521