https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T01:53:48.656271+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2019-01874 cnvd-2019-01874 2026-11-09T01:53:48.658603+00:00 cnvd-2019-01874 https://db.gcve.eu/vuln/fkie_cve-2018-1000415 fkie_cve-2018-1000415 2026-11-09T01:53:48.658673+00:00

A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in RebuildAction/BooleanParameterValue.jelly, RebuildAction/ExtendedChoiceParameterValue.jelly, RebuildAction/FileParameterValue.jelly, RebuildAction/LabelParameterValue.jelly, RebuildAction/ListSubversionTagsParameterValue.jelly, RebuildAction/MavenMetadataParameterValue.jelly, RebuildAction/NodeParameterValue.jelly, RebuildAction/PasswordParameterValue.jelly, RebuildAction/RandomStringParameterValue.jelly, RebuildAction/RunParameterValue.jelly, RebuildAction/StringParameterValue.jelly, RebuildAction/TextParameterValue.jelly, RebuildAction/ValidatingStringParameterValue.jelly that allows users with Job/Configuration permission to insert arbitrary HTML into rebuild forms.

 https://db.gcve.eu/vuln/ghsa-7m8v-w6f9-q2f9 GHSA-7m8v-w6f9-q2f9 — Cross-site Scripting in Jenkins Rebuilder Plugin 2026-11-09T01:53:48.658721+00:00

Affected: Maven: com.sonyericsson.hudson.plugins.rebuild:rebuild

A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in ``` RebuildAction/BooleanParameterValue.jelly, RebuildAction/ExtendedChoiceParameterValue.jelly, RebuildAction/FileParameterValue.jelly, RebuildAction/LabelParameterValue.jelly, RebuildAction/ListSubversionTagsParameterValue.jelly, RebuildAction/MavenMetadataParameterValue.jelly, RebuildAction/NodeParameterValue.jelly, RebuildAction/PasswordParameterValue.jelly, RebuildAction/RandomStringParameterValue.jelly, RebuildAction/RunParameterValue.jelly, RebuildAction/StringParameterValue.jelly, RebuildAction/TextParameterValue.jelly, RebuildAction/ValidatingStringParameterValue.jelly ``` that allows users with Job/Configuration permission to insert arbitrary HTML into rebuild forms.

 https://db.gcve.eu/vuln/gsd-2018-1000415 gsd-2018-1000415 2026-11-09T01:53:48.658752+00:00 gsd-2018-1000415