https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:37:30.765871+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99420 EUVD-2026-99420 2026-10-03T18:37:30.865445+00:00 EUVD-2026-99420 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3667 fkie_cve-2014-3667 2026-10-03T18:37:30.865488+00:00

Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code.

 https://cve.radiocsirt.org/vuln/ghsa-5xm3-48v5-6h7v GHSA-5xm3-48v5-6h7v — Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code 2026-10-03T18:37:30.865519+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code.

 https://cve.radiocsirt.org/vuln/gsd-2014-3667 gsd-2014-3667 2026-10-03T18:37:30.865545+00:00 gsd-2014-3667 https://cve.radiocsirt.org/vuln/rhba-2014:1630 RHBA-2014:1630 — Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 2.1 jenkins-plugin-openshift bug fix update 2026-10-03T18:37:30.865558+00:00

jenkins: default markup formatter permits offsite-bound forms (SECURITY-88) Jenkins: insecure storage of passwords in Subversion plugin (SECURITY-58) jenkins: configure a project you do not have access to (SECURITY-55) jenkins: command line interface job creation directory traversal (SECURITY-108) jenkins: session hijacking issue in Winstone (SECURITY-106) jenkins: clear text password disclosure (SECURITY-93) jenkins: user tokens not invalidated correctly (SECURITY-89) jenkins: interface vulnerable to clickjacking attacks (SECURITY-80) jenkins: failed log in attemps revealing if a user is valid or not (SECURITY-79) jenkins: input validation issue (SECURITY-77) jenkins: session fixation issue (SECURITY-75) jenkins: stored cross-site scripting flaw (SECURITY-74) jenkins: information leak via system diagnostic functionalities (SECURITY-73) jenkins: denial of service (SECURITY-87) jenkins: username discovery (SECURITY-110) jenkins: job configuration issues (SECURITY-127, SECURITY-128) jenkins: directory traversal flaw (SECURITY-131) jenkins: remote code execution from slaves (SECURITY-144) jenkins: remote code execution flaw (SECURITY-150) jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113) jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143)