https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:46:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04259 bdu:2023-04259 https://cve.radiocsirt.org/vuln/bdu:2023-04259 https://cve.radiocsirt.org/vuln/euvd-2026-199869 EUVD-2026-199869 https://cve.radiocsirt.org/vuln/euvd-2026-199869 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37946 <p>Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.</p> <p>Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-37946 https://cve.radiocsirt.org/vuln/ghsa-rwg5-2pv9-633w <p><strong>Affected:</strong> Maven: org.openshift.jenkins:openshift-login</p> <p>Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the existing session on login.</p> <p>This allows attackers to use social engineering techniques to gain administrator access to Jenkins.</p> <p>OpenShift Login Plugin 1.1.0.230.v5d7030b_f5432 invalidates the existing session on login.</p> <p><strong>Affected:</strong> Maven: org.openshift.jenkins:openshift-login</p> <p>Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the existing session on login.</p> <p>This allows attackers to use social engineering techniques to gain administrator access to Jenkins.</p> <p>OpenShift Login Plugin 1.1.0.230.v5d7030b_f5432 invalidates the existing session on login.</p> https://cve.radiocsirt.org/vuln/ghsa-rwg5-2pv9-633w https://cve.radiocsirt.org/vuln/gsd-2023-37946 gsd-2023-37946 https://cve.radiocsirt.org/vuln/gsd-2023-37946 https://cve.radiocsirt.org/vuln/rhsa-2024:0775 <p>SnakeYaml: Constructor Deserialization Remote Code Execution maven-shared-utils: Command injection via Commandline class apache-commons-text: variable interpolation RCE jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin jenkins-2-plugins/pipeline-build-step: Stored XSS vulnerability in Pipeline: Build Step Plugin Jenkins: Temporary file parameter created with insecure permissions Jenkins: Information disclosure through error stack traces related to agents Jenkins: Session fixation vulnerability in OpenShift Login Plugin jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE jenkins: cross-site WebSocket hijacking</p> <p>SnakeYaml: Constructor Deserialization Remote Code Execution maven-shared-utils: Command injection via Commandline class apache-commons-text: variable interpolation RCE jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin jenkins-2-plugins/pipeline-build-step: Stored XSS vulnerability in Pipeline: Build Step Plugin Jenkins: Temporary file parameter created with insecure permissions Jenkins: Information disclosure through error stack traces related to agents Jenkins: Session fixation vulnerability in OpenShift Login Plugin jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE jenkins: cross-site WebSocket hijacking</p> https://cve.radiocsirt.org/vuln/rhsa-2024:0775 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1743 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1743