Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:39:49 +0000 EUVD-2026-226592 https://cve.radiocsirt.org/vuln/euvd-2026-226592 EUVD-2026-226592 https://cve.radiocsirt.org/vuln/euvd-2026-226592 fkie_cve-2023-24439 https://cve.radiocsirt.org/vuln/fkie_cve-2023-24439 <p>Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier stores the private keys unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.</p> <p>Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier stores the private keys unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-24439 GHSA-g29v-5pwh-wxx4 — Plaintext Storage of a Password in Jenkins JIRA Pipeline Steps Plugin https://cve.radiocsirt.org/vuln/ghsa-g29v-5pwh-wxx4 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:jira-steps</p> <p>Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier stores the private keys unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:jira-steps</p> <p>Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier stores the private keys unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/ghsa-g29v-5pwh-wxx4 gsd-2023-24439 https://cve.radiocsirt.org/vuln/gsd-2023-24439 gsd-2023-24439 https://cve.radiocsirt.org/vuln/gsd-2023-24439 WID-SEC-W-2023-0193 — Jenkins Plugins: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0193 <p>Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0193