Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:59:06 +0000 cnvd-2015-06802 https://cve.radiocsirt.org/vuln/cnvd-2015-06802 cnvd-2015-06802 https://cve.radiocsirt.org/vuln/cnvd-2015-06802 EUVD-2026-90548 https://cve.radiocsirt.org/vuln/euvd-2026-90548 EUVD-2026-90548 https://cve.radiocsirt.org/vuln/euvd-2026-90548 fkie_cve-2015-1806 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1806 <p>The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.</p> <p>The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-1806 GHSA-mm9c-4cv4-7rfv — Jenkins allows for Privilege Escalation by Remote Authenticated Users https://cve.radiocsirt.org/vuln/ghsa-mm9c-4cv4-7rfv <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-mm9c-4cv4-7rfv gsd-2015-1806 https://cve.radiocsirt.org/vuln/gsd-2015-1806 gsd-2015-1806 https://cve.radiocsirt.org/vuln/gsd-2015-1806 RHSA-2015:1844 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.7 security, bug fix and enhancement update https://cve.radiocsirt.org/vuln/rhsa-2015:1844 <p>jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: external entity injection via XPath (SECURITY-165) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: External entity processing in XML can reveal sensitive local files (SECURITY-167) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180)</p> <p>jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: external entity injection via XPath (SECURITY-165) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: External entity processing in XML can reveal sensitive local files (SECURITY-167) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180)</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1844