https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:55:17.398437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-49954 cnvd-2022-49954 2026-10-04T00:55:17.402342+00:00 cnvd-2022-49954 https://cve.radiocsirt.org/vuln/euvd-2026-16753 EUVD-2026-16753 2026-10-04T00:55:17.402382+00:00 EUVD-2026-16753 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30966 fkie_cve-2022-30966 2026-10-04T00:55:17.402397+00:00

Jenkins Random String Parameter Plugin 1.0 and earlier does not escape the name and description of Random String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-38w4-q97c-xh4x GHSA-38w4-q97c-xh4x — Cross-site Scripting in Jenkins Random String Parameter Plugin 2026-10-04T00:55:17.402429+00:00

Affected: Maven: org.jenkins-ci.plugins:random-string-parameter

Jenkins Random String Parameter Plugin 1.0 and earlier does not escape the name and description of Random String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/gsd-2022-30966 gsd-2022-30966 2026-10-04T00:55:17.402454+00:00 gsd-2022-30966 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0090 WID-SEC-W-2023-0090 — Jenkins: Mehrere Schwachstellen 2026-10-04T00:55:17.402466+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.