https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:25:21.972223+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2020-2104 BIT-jenkins-2020-2104 2026-10-07T16:25:21.980054+00:00

Affected: Bitnami: jenkins

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart.

 https://cve.radiocsirt.org/vuln/cnvd-2020-17202 cnvd-2020-17202 2026-10-07T16:25:21.980149+00:00 cnvd-2020-17202 https://cve.radiocsirt.org/vuln/euvd-2026-35788 EUVD-2026-35788 2026-10-07T16:25:21.980166+00:00 EUVD-2026-35788 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2104 fkie_cve-2020-2104 2026-10-07T16:25:21.980178+00:00

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart.

 https://cve.radiocsirt.org/vuln/ghsa-r78q-qgx6-64pp GHSA-r78q-qgx6-64pp — Memory usage graphs accessible to anyone with Overall/Read 2026-10-07T16:25:21.980198+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins includes a feature that shows a JVM memory usage chart for the Jenkins controller.

Access to the chart in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier requires no permissions beyond the general Overall/Read, allowing users who are not administrators to view JVM memory usage data.

Jenkins 2.219, LTS 2.204.2 now requires Overall/Administer permissions to view the JVM memory usage chart.

 https://cve.radiocsirt.org/vuln/gsd-2020-2104 gsd-2020-2104 2026-10-07T16:25:21.980222+00:00 gsd-2020-2104 https://cve.radiocsirt.org/vuln/rhba-2020:0402 RHBA-2020:0402 — Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix update 2026-10-07T16:25:21.980232+00:00

jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection jenkins: Inbound TCP Agent Protocol/3 authentication bypass jenkins: UDP multicast/broadcast service amplification reflection attack jenkins: Non-constant time comparison of inbound TCP agent connection secret jenkins: Non-constant time HMAC comparison jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page jenkins: Memory usage graphs accessible to anyone with Overall/Read jenkins: REST APIs vulnerable to clickjacking