https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:01:48.181449+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-03396 bdu:2024-03396 2026-10-03T04:01:48.258812+00:00 bdu:2024-03396 https://cve.radiocsirt.org/vuln/euvd-2026-211539 EUVD-2026-211539 2026-10-03T04:01:48.258846+00:00 EUVD-2026-211539 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33005 fkie_cve-2023-33005 2026-10-03T04:01:48.258861+00:00

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login.

 https://cve.radiocsirt.org/vuln/ghsa-xxq2-74hw-vg6m GHSA-xxq2-74hw-vg6m — Jenkins WSO2 Oauth Plugin Session Fixation vulnerability 2026-10-03T04:01:48.258897+00:00

Affected: Maven: org.jenkins-ci.plugins:wso2id-oauth

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the existing session on login.

This allows attackers to use social engineering techniques to gain administrator access to Jenkins.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/gsd-2023-33005 gsd-2023-33005 2026-10-03T04:01:48.258923+00:00 gsd-2023-33005 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1228 WID-SEC-W-2023-1228 — Jenkins Plugins: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-03T04:01:48.258935+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site-Scripting-Angriff-durchzuführen, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Request-Forgery-Angriff durchzuführen.