https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:03:41.681749+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02022 bdu:2023-02022 2026-10-03T18:03:41.770813+00:00 bdu:2023-02022 https://cve.radiocsirt.org/vuln/euvd-2026-219968 EUVD-2026-219968 2026-10-03T18:03:41.770867+00:00 EUVD-2026-219968 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27905 fkie_cve-2023-27905 2026-10-03T18:03:41.770882+00:00

Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.

 https://cve.radiocsirt.org/vuln/ghsa-pqg3-xfx2-fmqp GHSA-pqg3-xfx2-fmqp — Cross site scripting vulnerability in update-center2 2026-10-03T18:03:41.770914+00:00

Affected: Maven: org.jenkins-ci:update-center2

Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.

 https://cve.radiocsirt.org/vuln/gsd-2023-27905 gsd-2023-27905 2026-10-03T18:03:41.770940+00:00 gsd-2023-27905 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0609 WID-SEC-W-2023-0609 — Jenkins: Mehrere Schwachstellen 2026-10-03T18:03:41.770952+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Code auszuführen