https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:05:30.684479+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02017 bdu:2023-02017 2026-10-03T19:05:30.800020+00:00 bdu:2023-02017 https://cve.radiocsirt.org/vuln/bit-jenkins-2023-27898 BIT-jenkins-2023-27898 2026-10-03T19:05:30.800062+00:00

Affected: Bitnami: jenkins

Jenkins LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide plugins to the configured update sites and have this message shown by Jenkins instances.

 https://cve.radiocsirt.org/vuln/euvd-2026-219961 EUVD-2026-219961 2026-10-03T19:05:30.800094+00:00 EUVD-2026-219961 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27898 fkie_cve-2023-27898 2026-10-03T19:05:30.800107+00:00

Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide plugins to the configured update sites and have this message shown by Jenkins instances.

 https://cve.radiocsirt.org/vuln/ghsa-j664-qhh4-hpf8 GHSA-j664-qhh4-hpf8 — Cross-site Scripting vulnerability in Jenkins 2026-10-03T19:05:30.800130+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide plugins to the configured update sites and have this message shown by Jenkins instances.

 https://cve.radiocsirt.org/vuln/gsd-2023-27898 gsd-2023-27898 2026-10-03T19:05:30.800153+00:00 gsd-2023-27898 https://cve.radiocsirt.org/vuln/rhsa-2023:1655 RHSA-2023:1655 — Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update 2026-10-03T19:05:30.800164+00:00

kube-apiserver: Aggregated API server can cause clients to be redirected (SSRF) spring-security-oauth2-client: Privilege Escalation in spring-security-oauth2-client spring-security: Authorization rules can be bypassed via forward or include dispatcher types in Spring Security apache-commons-text: variable interpolation RCE jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin haproxy: request smuggling attack in HTTP/1 header parsing Jenkins: XSS vulnerability in plugin manager Jenkins: Temporary plugin file created with insecure permissions Jenkins: Temporary file parameter created with insecure permissions Jenkins: Information disclosure through error stack traces related to agents

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0609 WID-SEC-W-2023-0609 — Jenkins: Mehrere Schwachstellen 2026-10-03T19:05:30.800199+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Code auszuführen