https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:10:26.423050+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-06903 cnvd-2015-06903 2026-10-03T09:10:26.436452+00:00 cnvd-2015-06903 https://cve.radiocsirt.org/vuln/euvd-2026-90604 EUVD-2026-90604 2026-10-03T09:10:26.436493+00:00 EUVD-2026-90604 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1812 fkie_cve-2015-1812 2026-10-03T09:10:26.436508+00:00

Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813.

 https://cve.radiocsirt.org/vuln/ghsa-w5v7-q2j4-fvpf GHSA-w5v7-q2j4-fvpf — Jenkins Cross-site Scripting vulnerability 2026-10-03T09:10:26.436537+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813.

 https://cve.radiocsirt.org/vuln/gsd-2015-1812 gsd-2015-1812 2026-10-03T09:10:26.436562+00:00 gsd-2015-1812 https://cve.radiocsirt.org/vuln/rhsa-2015:1844 RHSA-2015:1844 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.7 security, bug fix and enhancement update 2026-10-03T09:10:26.436574+00:00

jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: external entity injection via XPath (SECURITY-165) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: External entity processing in XML can reveal sensitive local files (SECURITY-167) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180)