https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:02:39.805606+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-665 certfr-2022-avi-665 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-03T22:02:39.956562+00:00 certfr-2022-avi-665 https://cve.radiocsirt.org/vuln/cnvd-2022-79936 cnvd-2022-79936 2026-10-03T22:02:39.956612+00:00 cnvd-2022-79936 https://cve.radiocsirt.org/vuln/euvd-2026-16007 EUVD-2026-16007 2026-10-03T22:02:39.956627+00:00 EUVD-2026-16007 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29046 fkie_cve-2022-29046 2026-10-03T22:02:39.956639+00:00

Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-wpr6-qvcq-8269 GHSA-wpr6-qvcq-8269 — Stored Cross-site Scripting vulnerability in Jenkins Subversion Plugin 2026-10-03T22:02:39.956668+00:00

Affected: Maven: org.jenkins-ci.plugins:subversion

Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Exploitation of this vulnerability requires that parameters are listed on another page, like the \"Build With Parameters\" and \"Parameters\" pages provided by Jenkins (core), and that those pages are not hardened to prevent exploitation. Jenkins (core) has prevented exploitation of vulnerabilities of this kind on the \"Build With Parameters\" and \"Parameters\" pages since 2.44 and LTS 2.32.2 as part of the [SECURITY-353 / CVE-2017-2601](https://www.jenkins.io/security/advisory/2017-02-01/#persisted-cross-site-scripting-vulnerability-in-parameter-names-and-descriptions) fix.

 https://cve.radiocsirt.org/vuln/gsd-2022-29046 gsd-2022-29046 2026-10-03T22:02:39.956698+00:00 gsd-2022-29046 https://cve.radiocsirt.org/vuln/rhsa-2022:0871 RHSA-2022:0871 — Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update 2026-10-03T22:02:39.956710+00:00

CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter workflow-cps: OS command execution through crafted SCM contents workflow-cps-global-lib: OS command execution through crafted SCM contents workflow-multibranch: OS command execution through crafted SCM contents workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps-global-lib: Pipeline-related plugins follow symbolic links or do not limit path names workflow-multibranch: Pipeline-related plugins follow symbolic links or do not limit path names workflow-cps: Password parameters are included from the original build in replayed builds workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability workflow-cps-global-lib: Sandbox bypass vulnerability pipeline-build-step: Password parameter default values exposed credentials: Stored XSS vulnerabilities in jenkins plugin subversion: Stored XSS vulnerabilities in Jenkins subversion plugin

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0265 WID-SEC-W-2022-0265 — Jenkins: Mehrere Schwachstellen 2026-10-03T22:02:39.956755+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und Dateien zu manipulieren.