https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:19:15.755059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-07821 cnvd-2015-07821 2026-10-03T12:19:15.769977+00:00 cnvd-2015-07821 https://cve.radiocsirt.org/vuln/euvd-2026-93302 EUVD-2026-93302 2026-10-03T12:19:15.770017+00:00 EUVD-2026-93302 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5326 fkie_cve-2015-5326 2026-10-03T12:19:15.770031+00:00

Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.

 https://cve.radiocsirt.org/vuln/ghsa-5mwr-jg3r-jv66 GHSA-5mwr-jg3r-jv66 — Jenkins allows Cross-Site Scripting (XSS) 2026-10-03T12:19:15.770059+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.

 https://cve.radiocsirt.org/vuln/gsd-2015-5326 gsd-2015-5326 2026-10-03T12:19:15.770083+00:00 gsd-2015-5326 https://cve.radiocsirt.org/vuln/rhsa-2016:0070 RHSA-2016:0070 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.1.1 bug fix and enhancement update 2026-10-03T12:19:15.770094+00:00

commons-fileupload: Arbitrary file upload via deserialization stapler-adjunct-zeroclipboard: multiple cross-site scripting (XSS) flaws jenkins: denial of service (SECURITY-87) jenkins: username discovery (SECURITY-110) jenkins: job configuration issues (SECURITY-127, SECURITY-128) jenkins: directory traversal flaw (SECURITY-131) jenkins: remote code execution flaw (SECURITY-150) jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) jenkins: password exposure in DOM (SECURITY-138) jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143) jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180) jenkins: Project name disclosure via fingerprints (SECURITY-153) jenkins: Public value used for CSRF protection salt (SECURITY-169) jenkins: XXE injection into job configurations via CLI (SECURITY-173) jenkins: Secret key not verified when connecting a slave (SECURITY-184) jenkins: Information disclosure via sidepanel (SECURITY-192) jenkins: Local file inclusion vulnerability (SECURITY-195) jenkins: API tokens of other users available to admin…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1215 WID-SEC-W-2023-1215 — Jenkins: Mehrere Schwachstellen 2026-10-03T12:19:15.770157+00:00

Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsfunktionen zu umgehen, einen "stored cross-site-scripting"-Angriff durchzuführen, Benutzerrechte zu erlangen und um Informationen offenzulegen.