Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:13:00 +0000 bdu:2025-08571 https://cve.radiocsirt.org/vuln/bdu:2025-08571 bdu:2025-08571 https://cve.radiocsirt.org/vuln/bdu:2025-08571 EUVD-2026-260014 https://cve.radiocsirt.org/vuln/euvd-2026-260014 EUVD-2026-260014 https://cve.radiocsirt.org/vuln/euvd-2026-260014 fkie_cve-2025-53676 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53676 <p>Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.</p> <p>Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53676 GHSA-56h7-r62c-83qp — Jenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users https://cve.radiocsirt.org/vuln/ghsa-56h7-r62c-83qp <p><strong>Affected:</strong> Maven: io.jenkins.plugins:xooa</p> <p>Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.</p> <p><strong>Affected:</strong> Maven: io.jenkins.plugins:xooa</p> <p>Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/ghsa-56h7-r62c-83qp WID-SEC-W-2025-1521 — Jenkins Plugins: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521