https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:25:42.768133+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-108117 EUVD-2026-108117 2026-10-03T19:25:42.832714+00:00 EUVD-2026-108117 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5573 fkie_cve-2013-5573 2026-10-03T19:25:42.832755+00:00

Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.

 https://cve.radiocsirt.org/vuln/ghsa-52g6-pfrq-rxfv GHSA-52g6-pfrq-rxfv — Jenkins allows Cross-Site Scripting (XSS) in User Configuration 2026-10-03T19:25:42.832787+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.

 https://cve.radiocsirt.org/vuln/gsd-2013-5573 gsd-2013-5573 2026-10-03T19:25:42.832811+00:00 gsd-2013-5573 https://cve.radiocsirt.org/vuln/rhba-2014:1630 RHBA-2014:1630 — Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 2.1 jenkins-plugin-openshift bug fix update 2026-10-03T19:25:42.832823+00:00

jenkins: default markup formatter permits offsite-bound forms (SECURITY-88) Jenkins: insecure storage of passwords in Subversion plugin (SECURITY-58) jenkins: configure a project you do not have access to (SECURITY-55) jenkins: command line interface job creation directory traversal (SECURITY-108) jenkins: session hijacking issue in Winstone (SECURITY-106) jenkins: clear text password disclosure (SECURITY-93) jenkins: user tokens not invalidated correctly (SECURITY-89) jenkins: interface vulnerable to clickjacking attacks (SECURITY-80) jenkins: failed log in attemps revealing if a user is valid or not (SECURITY-79) jenkins: input validation issue (SECURITY-77) jenkins: session fixation issue (SECURITY-75) jenkins: stored cross-site scripting flaw (SECURITY-74) jenkins: information leak via system diagnostic functionalities (SECURITY-73) jenkins: denial of service (SECURITY-87) jenkins: username discovery (SECURITY-110) jenkins: job configuration issues (SECURITY-127, SECURITY-128) jenkins: directory traversal flaw (SECURITY-131) jenkins: remote code execution from slaves (SECURITY-144) jenkins: remote code execution flaw (SECURITY-150) jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113) jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143)