https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:36:56.306269+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02005 bdu:2024-02005 2026-10-04T14:36:56.395414+00:00 bdu:2024-02005 https://cve.radiocsirt.org/vuln/euvd-2026-217356 EUVD-2026-217356 2026-10-04T14:36:56.395453+00:00 EUVD-2026-217356 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28150 fkie_cve-2024-28150 2026-10-04T14:36:56.395474+00:00

Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, and index page titles shown as part of the report frame, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-xrrw-9j78-hpf3 GHSA-xrrw-9j78-hpf3 — Jenkins HTML Publisher Plugin Stored XSS vulnerability 2026-10-04T14:36:56.395515+00:00

Affected: Maven: org.jenkins-ci.plugins:htmlpublisher

Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, and index page titles shown as part of the report frame, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/gsd-2024-28150 gsd-2024-28150 2026-10-04T14:36:56.395597+00:00 gsd-2024-28150 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0564 WID-SEC-W-2024-0564 — Jenkins: Mehrere Schwachstellen 2026-10-04T14:36:56.395619+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.