https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:03:09.171713+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-07827 cnvd-2015-07827 2026-10-03T06:03:09.267797+00:00 cnvd-2015-07827 https://cve.radiocsirt.org/vuln/euvd-2026-256413 EUVD-2026-256413 2026-10-03T06:03:09.267835+00:00 EUVD-2026-256413 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5317 fkie_cve-2015-5317 2026-10-03T06:03:09.267850+00:00

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

 https://cve.radiocsirt.org/vuln/ghsa-8pqx-3rxx-f5pm GHSA-8pqx-3rxx-f5pm — Jenkins discloses project names via fingerprints 2026-10-03T06:03:09.267879+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

 https://cve.radiocsirt.org/vuln/gsd-2015-5317 gsd-2015-5317 2026-10-03T06:03:09.267904+00:00 gsd-2015-5317 https://cve.radiocsirt.org/vuln/rhsa-2016:0070 RHSA-2016:0070 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.1.1 bug fix and enhancement update 2026-10-03T06:03:09.267916+00:00

commons-fileupload: Arbitrary file upload via deserialization stapler-adjunct-zeroclipboard: multiple cross-site scripting (XSS) flaws jenkins: denial of service (SECURITY-87) jenkins: username discovery (SECURITY-110) jenkins: job configuration issues (SECURITY-127, SECURITY-128) jenkins: directory traversal flaw (SECURITY-131) jenkins: remote code execution flaw (SECURITY-150) jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) jenkins: password exposure in DOM (SECURITY-138) jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143) jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180) jenkins: Project name disclosure via fingerprints (SECURITY-153) jenkins: Public value used for CSRF protection salt (SECURITY-169) jenkins: XXE injection into job configurations via CLI (SECURITY-173) jenkins: Secret key not verified when connecting a slave (SECURITY-184) jenkins: Information disclosure via sidepanel (SECURITY-192) jenkins: Local file inclusion vulnerability (SECURITY-195) jenkins: API tokens of other users available to admin…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1215 WID-SEC-W-2023-1215 — Jenkins: Mehrere Schwachstellen 2026-10-03T06:03:09.267982+00:00

Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsfunktionen zu umgehen, einen "stored cross-site-scripting"-Angriff durchzuführen, Benutzerrechte zu erlangen und um Informationen offenzulegen.