https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:44:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-226607 EUVD-2026-226607 https://cve.radiocsirt.org/vuln/euvd-2026-226607 https://cve.radiocsirt.org/vuln/fkie_cve-2023-24425 <p>Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to.</p> <p>Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-24425 https://cve.radiocsirt.org/vuln/ghsa-2jpx-h8j2-g8m4 <p><strong>Affected:</strong> Maven: com.cloudbees.jenkins.plugins:kubernetes-credentials-provider</p> <p>Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to.</p> <p><strong>Affected:</strong> Maven: com.cloudbees.jenkins.plugins:kubernetes-credentials-provider</p> <p>Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to.</p> https://cve.radiocsirt.org/vuln/ghsa-2jpx-h8j2-g8m4 https://cve.radiocsirt.org/vuln/gsd-2023-24425 gsd-2023-24425 https://cve.radiocsirt.org/vuln/gsd-2023-24425 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0193 <p>Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0193