Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:40:58 +0000 cnvd-2016-01378 https://cve.radiocsirt.org/vuln/cnvd-2016-01378 cnvd-2016-01378 https://cve.radiocsirt.org/vuln/cnvd-2016-01378 EUVD-2026-81583 https://cve.radiocsirt.org/vuln/euvd-2026-81583 EUVD-2026-81583 https://cve.radiocsirt.org/vuln/euvd-2026-81583 fkie_cve-2016-0791 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0791 <p>Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach.</p> <p>Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0791 GHSA-jmw7-ph6p-33cc — Exposure of Sensitive Information in Jenkins Core https://cve.radiocsirt.org/vuln/ghsa-jmw7-ph6p-33cc <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach.</p> https://cve.radiocsirt.org/vuln/ghsa-jmw7-ph6p-33cc gsd-2016-0791 https://cve.radiocsirt.org/vuln/gsd-2016-0791 gsd-2016-0791 https://cve.radiocsirt.org/vuln/gsd-2016-0791 RHSA-2016:0711 — Red Hat Security Advisory: jenkins security update https://cve.radiocsirt.org/vuln/rhsa-2016:0711 <p>jenkins: Remote code execution vulnerability in remoting module (SECURITY-232) jenkins: HTTP response splitting vulnerability (SECURITY-238) jenkins: Non-constant time comparison of API token (SECURITY-241) jenkins: Non-constant time comparison of CSRF crumbs (SECURITY-245) jenkins: Remote code execution through remote API (SECURITY-247)</p> <p>jenkins: Remote code execution vulnerability in remoting module (SECURITY-232) jenkins: HTTP response splitting vulnerability (SECURITY-238) jenkins: Non-constant time comparison of API token (SECURITY-241) jenkins: Non-constant time comparison of CSRF crumbs (SECURITY-245) jenkins: Remote code execution through remote API (SECURITY-247)</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0711