https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:03:57.440444+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-109592 EUVD-2026-109592 2026-10-03T11:03:57.520128+00:00 EUVD-2026-109592 https://cve.radiocsirt.org/vuln/fkie_cve-2012-0325 fkie_cve-2012-0325 2026-10-03T11:03:57.520171+00:00

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.

 https://cve.radiocsirt.org/vuln/ghsa-cc55-c9j4-m7cx GHSA-cc55-c9j4-m7cx — Jenkins allows Cross-Site Scripting (XSS) 2026-10-03T11:03:57.520209+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.

 https://cve.radiocsirt.org/vuln/gsd-2012-0325 gsd-2012-0325 2026-10-03T11:03:57.520239+00:00 gsd-2012-0325 https://cve.radiocsirt.org/vuln/jvndb-2012-000023 jvndb-2012-000023 2026-10-03T11:03:57.520253+00:00

Jenkins contains a cross-site scripting vulnerability. Jenkins is a continuous integration (CI) tool. Note that this vulnerability is different from JVN#14791558. Minoru Sakai of SCSK Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.