https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:30:38.549723+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-07820 cnvd-2015-07820 2026-10-03T07:30:38.563341+00:00 cnvd-2015-07820 https://cve.radiocsirt.org/vuln/euvd-2026-93369 EUVD-2026-93369 2026-10-03T07:30:38.563379+00:00 EUVD-2026-93369 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5325 fkie_cve-2015-5325 2026-10-03T07:30:38.563394+00:00

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665.

 https://cve.radiocsirt.org/vuln/ghsa-x2q2-8pwq-fr5r GHSA-x2q2-8pwq-fr5r — Jenkins allows Bypass of Access Restrictions 2026-10-03T07:30:38.563423+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665.

 https://cve.radiocsirt.org/vuln/gsd-2015-5325 gsd-2015-5325 2026-10-03T07:30:38.563448+00:00 gsd-2015-5325 https://cve.radiocsirt.org/vuln/rhsa-2016:0070 RHSA-2016:0070 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.1.1 bug fix and enhancement update 2026-10-03T07:30:38.563460+00:00

commons-fileupload: Arbitrary file upload via deserialization stapler-adjunct-zeroclipboard: multiple cross-site scripting (XSS) flaws jenkins: denial of service (SECURITY-87) jenkins: username discovery (SECURITY-110) jenkins: job configuration issues (SECURITY-127, SECURITY-128) jenkins: directory traversal flaw (SECURITY-131) jenkins: remote code execution flaw (SECURITY-150) jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) jenkins: password exposure in DOM (SECURITY-138) jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143) jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180) jenkins: Project name disclosure via fingerprints (SECURITY-153) jenkins: Public value used for CSRF protection salt (SECURITY-169) jenkins: XXE injection into job configurations via CLI (SECURITY-173) jenkins: Secret key not verified when connecting a slave (SECURITY-184) jenkins: Information disclosure via sidepanel (SECURITY-192) jenkins: Local file inclusion vulnerability (SECURITY-195) jenkins: API tokens of other users available to admin…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1215 WID-SEC-W-2023-1215 — Jenkins: Mehrere Schwachstellen 2026-10-03T07:30:38.563520+00:00

Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsfunktionen zu umgehen, einen "stored cross-site-scripting"-Angriff durchzuführen, Benutzerrechte zu erlangen und um Informationen offenzulegen.