https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:24:01.845583+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-34787 cnvd-2019-34787 2026-10-03T04:24:01.856512+00:00 cnvd-2019-34787 https://cve.radiocsirt.org/vuln/euvd-2026-53632 EUVD-2026-53632 2026-10-03T04:24:01.856554+00:00 EUVD-2026-53632 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10405 fkie_cve-2019-10405 2026-10-03T04:24:01.856568+00:00

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly.

 https://cve.radiocsirt.org/vuln/ghsa-47wc-p5cp-w7pw GHSA-47wc-p5cp-w7pw — Exposure of Sensitive Information to an Unauthorized Actor in Jenkins 2026-10-03T04:24:01.856598+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly.

 https://cve.radiocsirt.org/vuln/gsd-2019-10405 gsd-2019-10405 2026-10-03T04:24:01.856629+00:00 gsd-2019-10405 https://cve.radiocsirt.org/vuln/rhba-2020:0017 RHBA-2020:0017 — Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update 2026-10-03T04:24:01.856653+00:00

jenkins: Stored XSS vulnerability in expandable textbox form control jenkins: XSS vulnerability in combobox form control jenkins: Stored XSS vulnerability in SCM tag action tooltip jenkins: Stored XSS vulnerability in queue item tooltip jenkins: Diagnostic web page exposed Cookie HTTP header jenkins: XSS vulnerability in Jenkins URL setting