https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:30:37.998933+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-00857 cnvd-2016-00857 2026-10-03T07:30:38.011749+00:00 cnvd-2016-00857 https://cve.radiocsirt.org/vuln/euvd-2026-95054 EUVD-2026-95054 2026-10-03T07:30:38.011787+00:00 EUVD-2026-95054 https://cve.radiocsirt.org/vuln/fkie_cve-2015-7538 fkie_cve-2015-7538 2026-10-03T07:30:38.011801+00:00

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-w7qm-fprw-cqgq GHSA-w7qm-fprw-cqgq — Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack 2026-10-03T07:30:38.011830+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2015-7538 gsd-2015-7538 2026-10-03T07:30:38.011853+00:00 gsd-2015-7538 https://cve.radiocsirt.org/vuln/rhsa-2016:0070 RHSA-2016:0070 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.1.1 bug fix and enhancement update 2026-10-03T07:30:38.011865+00:00

commons-fileupload: Arbitrary file upload via deserialization stapler-adjunct-zeroclipboard: multiple cross-site scripting (XSS) flaws jenkins: denial of service (SECURITY-87) jenkins: username discovery (SECURITY-110) jenkins: job configuration issues (SECURITY-127, SECURITY-128) jenkins: directory traversal flaw (SECURITY-131) jenkins: remote code execution flaw (SECURITY-150) jenkins: plug-in code can be downloaded by anyone with read access (SECURITY-155) jenkins: password exposure in DOM (SECURITY-138) jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143) jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180) jenkins: Project name disclosure via fingerprints (SECURITY-153) jenkins: Public value used for CSRF protection salt (SECURITY-169) jenkins: XXE injection into job configurations via CLI (SECURITY-173) jenkins: Secret key not verified when connecting a slave (SECURITY-184) jenkins: Information disclosure via sidepanel (SECURITY-192) jenkins: Local file inclusion vulnerability (SECURITY-195) jenkins: API tokens of other users available to admin…