https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:36:54.332469+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-03160 cnvd-2016-03160 2026-10-06T17:36:54.338036+00:00 cnvd-2016-03160 https://cve.radiocsirt.org/vuln/euvd-2026-83752 EUVD-2026-83752 2026-10-06T17:36:54.338071+00:00 EUVD-2026-83752 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3725 fkie_cve-2016-3725 2026-10-06T17:36:54.338085+00:00

Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).

 https://cve.radiocsirt.org/vuln/ghsa-59fm-6x3q-q3q5 GHSA-59fm-6x3q-q3q5 — Missing permissions check in Jenkins Core 2026-10-06T17:36:54.338111+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).

 https://cve.radiocsirt.org/vuln/gsd-2016-3725 gsd-2016-3725 2026-10-06T17:36:54.338133+00:00 gsd-2016-3725 https://cve.radiocsirt.org/vuln/rhsa-2016:1206 RHSA-2016:1206 — Red Hat Security Advisory: jenkins security update 2026-10-06T17:36:54.338144+00:00

jenkins: Arbitrary build parameters are passed to build scripts as environment variables (SECURITY-170) jenkins: Malicious users with multiple user accounts can prevent other users from logging in (SECURITY-243) jenkins: Information on installed plugins exposed via API (SECURITY-250) jenkins: Encrypted secrets (e.g. passwords) were leaked to users with permission to read configuration (SECURITY-266) jenkins: Regular users can trigger download of update site metadata (SECURITY-273) jenkins: Open redirect to scheme-relative URLs (SECURITY-276) jenkins: Granting the permission to read node configurations allows access to overall system configuration (SECURITY-281)