Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:11:01 +0000 EUVD-2026-329848 https://cve.radiocsirt.org/vuln/euvd-2026-329848 EUVD-2026-329848 https://cve.radiocsirt.org/vuln/euvd-2026-329848 fkie_cve-2026-57302 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57302 <p>Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system.</p> <p>Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-57302 GHSA-j4ph-wp3c-c37w — Jenkins FitNesse Plugin stores passwords unencrypted https://cve.radiocsirt.org/vuln/ghsa-j4ph-wp3c-c37w <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:fitnesse</p> <p>Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller as part of its configuration.</p> <p>These passwords can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> <p>As of publication of this advisory, there is no fix.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:fitnesse</p> <p>Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller as part of its configuration.</p> <p>These passwords can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> <p>As of publication of this advisory, there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-j4ph-wp3c-c37w WID-SEC-W-2026-2074 — Jenkins Plugins: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2074 <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen zu manipulieren oder offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen zu manipulieren oder offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2074