Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:05:12 +0000 bdu:2025-08574 https://cve.radiocsirt.org/vuln/bdu:2025-08574 bdu:2025-08574 https://cve.radiocsirt.org/vuln/bdu:2025-08574 EUVD-2026-260010 https://cve.radiocsirt.org/vuln/euvd-2026-260010 EUVD-2026-260010 https://cve.radiocsirt.org/vuln/euvd-2026-260010 fkie_cve-2025-53672 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53672 <p>Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.</p> <p>Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53672 GHSA-cvg7-767r-w3fq — Jenkins Kryptowire Plugin vulnerability stores unencrypted Kryptowire API key https://cve.radiocsirt.org/vuln/ghsa-cvg7-767r-w3fq <p><strong>Affected:</strong> Maven: io.jenkins.plugins:kryptowire</p> <p>Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file `org.aerogear.kryptowire.GlobalConfigurationImpl.xml` on the Jenkins controller as part of its configuration.</p> <p>This API key can be viewed by users with access to the Jenkins controller file system.</p> <p>As of publication of this advisory, there is no fix.</p> <p><strong>Affected:</strong> Maven: io.jenkins.plugins:kryptowire</p> <p>Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file `org.aerogear.kryptowire.GlobalConfigurationImpl.xml` on the Jenkins controller as part of its configuration.</p> <p>This API key can be viewed by users with access to the Jenkins controller file system.</p> <p>As of publication of this advisory, there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-cvg7-767r-w3fq WID-SEC-W-2025-1521 — Jenkins Plugins: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521