https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T13:03:55.592014+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-20422 cnvd-2020-20422 2026-10-17T13:03:55.597775+00:00 cnvd-2020-20422 https://cve.radiocsirt.org/vuln/euvd-2026-53608 EUVD-2026-53608 2026-10-17T13:03:55.597830+00:00 EUVD-2026-53608 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10383 fkie_cve-2019-10383 2026-10-17T13:03:55.597853+00:00

A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages.

 https://cve.radiocsirt.org/vuln/ghsa-9m48-54pj-h248 GHSA-9m48-54pj-h248 — Improper Neutralization of Input During Web Page Generation in Jenkins 2026-10-17T13:03:55.597898+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages.

 https://cve.radiocsirt.org/vuln/gsd-2019-10383 gsd-2019-10383 2026-10-17T13:03:55.597937+00:00 gsd-2019-10383 https://cve.radiocsirt.org/vuln/rhsa-2019:2789 RHSA-2019:2789 — Red Hat Security Advisory: OpenShift Container Platform 4.1.16 jenkins security update 2026-10-17T13:03:55.597955+00:00

jenkins: stored cross-site scripting in update center web pages (SECURITY-1453) jenkins: CSRF protection tokens for anonymous users did not expire in some circumstances (SECURITY-1491)