https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 07:17:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-14467 EUVD-2026-14467 https://cve.radiocsirt.org/vuln/euvd-2026-14467 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25201 <p>Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.</p> <p>Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25201 https://cve.radiocsirt.org/vuln/ghsa-wwf6-x2rv-vxqh <p><strong>Affected:</strong> Maven: com.checkmarx.jenkins:checkmarx</p> <p>Checkmarx Plugin 2022.1.2 and earlier does not perform permission checks in several HTTP endpoints.</p> <p>This allows attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.</p> <p><strong>Affected:</strong> Maven: com.checkmarx.jenkins:checkmarx</p> <p>Checkmarx Plugin 2022.1.2 and earlier does not perform permission checks in several HTTP endpoints.</p> <p>This allows attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.</p> https://cve.radiocsirt.org/vuln/ghsa-wwf6-x2rv-vxqh https://cve.radiocsirt.org/vuln/gsd-2022-25201 gsd-2022-25201 https://cve.radiocsirt.org/vuln/gsd-2022-25201