https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:27:12.249650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-98140 EUVD-2026-98140 2026-10-03T19:27:12.317197+00:00 EUVD-2026-98140 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2059 fkie_cve-2014-2059 2026-10-03T19:27:12.317231+00:00

Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.

 https://cve.radiocsirt.org/vuln/ghsa-v759-3fh9-84mx GHSA-v759-3fh9-84mx — Jenkins directory traversal vulnerability 2026-10-03T19:27:12.317261+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.

 https://cve.radiocsirt.org/vuln/gsd-2014-2059 gsd-2014-2059 2026-10-03T19:27:12.317294+00:00 gsd-2014-2059 https://cve.radiocsirt.org/vuln/rhba-2014:1630 RHBA-2014:1630 — Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 2.1 jenkins-plugin-openshift bug fix update 2026-10-03T19:27:12.317320+00:00

jenkins: default markup formatter permits offsite-bound forms (SECURITY-88) Jenkins: insecure storage of passwords in Subversion plugin (SECURITY-58) jenkins: configure a project you do not have access to (SECURITY-55) jenkins: command line interface job creation directory traversal (SECURITY-108) jenkins: session hijacking issue in Winstone (SECURITY-106) jenkins: clear text password disclosure (SECURITY-93) jenkins: user tokens not invalidated correctly (SECURITY-89) jenkins: interface vulnerable to clickjacking attacks (SECURITY-80) jenkins: failed log in attemps revealing if a user is valid or not (SECURITY-79) jenkins: input validation issue (SECURITY-77) jenkins: session fixation issue (SECURITY-75) jenkins: stored cross-site scripting flaw (SECURITY-74) jenkins: information leak via system diagnostic functionalities (SECURITY-73) jenkins: denial of service (SECURITY-87) jenkins: username discovery (SECURITY-110) jenkins: job configuration issues (SECURITY-127, SECURITY-128) jenkins: directory traversal flaw (SECURITY-131) jenkins: remote code execution from slaves (SECURITY-144) jenkins: remote code execution flaw (SECURITY-150) jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113) jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143)