https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:09:59.882527+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99444 EUVD-2026-99444 2026-10-03T09:09:59.963317+00:00 EUVD-2026-99444 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3662 fkie_cve-2014-3662 2026-10-03T09:09:59.963361+00:00

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.

 https://cve.radiocsirt.org/vuln/ghsa-fxqr-px2m-fvc2 GHSA-fxqr-px2m-fvc2 — Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability 2026-10-03T09:09:59.963394+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.

 https://cve.radiocsirt.org/vuln/gsd-2014-3662 gsd-2014-3662 2026-10-03T09:09:59.963420+00:00 gsd-2014-3662 https://cve.radiocsirt.org/vuln/rhba-2014:1630 RHBA-2014:1630 — Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 2.1 jenkins-plugin-openshift bug fix update 2026-10-03T09:09:59.963432+00:00

jenkins: default markup formatter permits offsite-bound forms (SECURITY-88) Jenkins: insecure storage of passwords in Subversion plugin (SECURITY-58) jenkins: configure a project you do not have access to (SECURITY-55) jenkins: command line interface job creation directory traversal (SECURITY-108) jenkins: session hijacking issue in Winstone (SECURITY-106) jenkins: clear text password disclosure (SECURITY-93) jenkins: user tokens not invalidated correctly (SECURITY-89) jenkins: interface vulnerable to clickjacking attacks (SECURITY-80) jenkins: failed log in attemps revealing if a user is valid or not (SECURITY-79) jenkins: input validation issue (SECURITY-77) jenkins: session fixation issue (SECURITY-75) jenkins: stored cross-site scripting flaw (SECURITY-74) jenkins: information leak via system diagnostic functionalities (SECURITY-73) jenkins: denial of service (SECURITY-87) jenkins: username discovery (SECURITY-110) jenkins: job configuration issues (SECURITY-127, SECURITY-128) jenkins: directory traversal flaw (SECURITY-131) jenkins: remote code execution from slaves (SECURITY-144) jenkins: remote code execution flaw (SECURITY-150) jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113) jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143)