UBUNTU-CVE-2026-83618

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

UBUNTU-CVE-2026-83608

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

UBUNTU-CVE-2026-83619

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

CVE-2026-83608

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

CVE-2026-83612

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

CVE-2026-83617

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

CVE-2026-83616

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

UBUNTU-CVE-2026-83613

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

UBUNTU-CVE-2026-83607

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

CVE-2026-83619

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

CVE-2026-83613

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

CVE-2026-83611

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

CVE-2026-83609

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

UBUNTU-CVE-2026-83605

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

Linux Distros Unpatched Vulnerability : CVE-2026-83616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...

UBUNTU-CVE-2026-83611

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

UBUNTU-CVE-2026-83606

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...

Lack of type restriction in deserialization allows creating user objects

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML. NOTE: These user objects are not actual Jenkins accounts and...

Jenkins LTS < 2.568.3 / Jenkins weekly < 2.580 Multiple Vulnerabilities

According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.568.3 or Jenkins weekly prior to 2.580. It is, therefore, affected by multiple vulnerabilities: - In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient...

Linux Distros Unpatched Vulnerability : CVE-2026-83607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.14 and 0.9.11, and ...