https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:10:03.915765+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-06799 cnvd-2015-06799 2026-10-03T09:10:03.929582+00:00 cnvd-2015-06799 https://cve.radiocsirt.org/vuln/euvd-2026-90611 EUVD-2026-90611 2026-10-03T09:10:03.929627+00:00 EUVD-2026-90611 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1810 fkie_cve-2015-1810 2026-10-03T09:10:03.929642+00:00

The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name.

 https://cve.radiocsirt.org/vuln/ghsa-37wm-28rm-56vw GHSA-37wm-28rm-56vw — Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation 2026-10-03T09:10:03.929674+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name.

 https://cve.radiocsirt.org/vuln/gsd-2015-1810 gsd-2015-1810 2026-10-03T09:10:03.929699+00:00 gsd-2015-1810 https://cve.radiocsirt.org/vuln/rhsa-2015:1844 RHSA-2015:1844 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.7 security, bug fix and enhancement update 2026-10-03T09:10:03.929710+00:00

jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: external entity injection via XPath (SECURITY-165) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: External entity processing in XML can reveal sensitive local files (SECURITY-167) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180)