https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:14:31 +0000 https://cve.radiocsirt.org/vuln/bit-jenkins-2020-2101 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2020-2101 https://cve.radiocsirt.org/vuln/euvd-2026-35786 EUVD-2026-35786 https://cve.radiocsirt.org/vuln/euvd-2026-35786 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2101 <p>Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.</p> <p>Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2101 https://cve.radiocsirt.org/vuln/ghsa-w7jr-wqw6-54xc <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.218 and earlier, LTS 2.204.1 and earlier does not use a constant-time comparison validating the connection secret when an inbound TCP agent connection is initiated. This could potentially allow attackers to use statistical methods to obtain the connection secret.</p> <p>Jenkins 2.219, LTS 2.204.2 now uses a constant-time comparison function for verifying connection secrets.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.218 and earlier, LTS 2.204.1 and earlier does not use a constant-time comparison validating the connection secret when an inbound TCP agent connection is initiated. This could potentially allow attackers to use statistical methods to obtain the connection secret.</p> <p>Jenkins 2.219, LTS 2.204.2 now uses a constant-time comparison function for verifying connection secrets.</p> https://cve.radiocsirt.org/vuln/ghsa-w7jr-wqw6-54xc https://cve.radiocsirt.org/vuln/gsd-2020-2101 gsd-2020-2101 https://cve.radiocsirt.org/vuln/gsd-2020-2101 https://cve.radiocsirt.org/vuln/rhba-2020:0402 <p>jquery: Prototype pollution in object&#39;s prototype leading to denial of service, remote code execution, or property injection jenkins: Inbound TCP Agent Protocol/3 authentication bypass jenkins: UDP multicast/broadcast service amplification reflection attack jenkins: Non-constant time comparison of inbound TCP agent connection secret jenkins: Non-constant time HMAC comparison jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page jenkins: Memory usage graphs accessible to anyone with Overall/Read jenkins: REST APIs vulnerable to clickjacking</p> <p>jquery: Prototype pollution in object&#39;s prototype leading to denial of service, remote code execution, or property injection jenkins: Inbound TCP Agent Protocol/3 authentication bypass jenkins: UDP multicast/broadcast service amplification reflection attack jenkins: Non-constant time comparison of inbound TCP agent connection secret jenkins: Non-constant time HMAC comparison jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page jenkins: Memory usage graphs accessible to anyone with Overall/Read jenkins: REST APIs vulnerable to clickjacking</p> https://cve.radiocsirt.org/vuln/rhba-2020:0402