Session fixation vulnerability

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the existing session on login. This allows attackers to use social engineering techniques to gain administrator access to Jenkins. This vulnerability was introduced in Jenkins 2.266 and LTS 2.277.1. Jenkins 2.300, LTS 2.289.2...

CVE-2020-10931

Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service daemon crash via a crafted binary protocol header to tryreadcommandbinary in memcached.c...