Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 13:58:26 +0000 bdu:2020-02162 https://cve.radiocsirt.org/vuln/bdu:2020-02162 bdu:2020-02162 https://cve.radiocsirt.org/vuln/bdu:2020-02162 cnvd-2020-20421 https://cve.radiocsirt.org/vuln/cnvd-2020-20421 cnvd-2020-20421 https://cve.radiocsirt.org/vuln/cnvd-2020-20421 EUVD-2026-53616 https://cve.radiocsirt.org/vuln/euvd-2026-53616 EUVD-2026-53616 https://cve.radiocsirt.org/vuln/euvd-2026-53616 fkie_cve-2019-10384 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10384 <p>Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.</p> <p>Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10384 GHSA-vcr8-h8qp-qj8h — Cross-Site Request Forgery in Jenkins https://cve.radiocsirt.org/vuln/ghsa-vcr8-h8qp-qj8h <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.</p> https://cve.radiocsirt.org/vuln/ghsa-vcr8-h8qp-qj8h gsd-2019-10384 https://cve.radiocsirt.org/vuln/gsd-2019-10384 gsd-2019-10384 https://cve.radiocsirt.org/vuln/gsd-2019-10384 RHSA-2019:2789 — Red Hat Security Advisory: OpenShift Container Platform 4.1.16 jenkins security update https://cve.radiocsirt.org/vuln/rhsa-2019:2789 <p>jenkins: stored cross-site scripting in update center web pages (SECURITY-1453) jenkins: CSRF protection tokens for anonymous users did not expire in some circumstances (SECURITY-1491)</p> <p>jenkins: stored cross-site scripting in update center web pages (SECURITY-1453) jenkins: CSRF protection tokens for anonymous users did not expire in some circumstances (SECURITY-1491)</p> https://cve.radiocsirt.org/vuln/rhsa-2019:2789