34 matches found
MSC-2026-10032
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
CVE-2026-10032
creationtimestamp| type| source ---|---|--- 2026-08-04 16:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j7o7c57m4b5cj 2026-10-02 23:30:28+00:00| seen| https://gist.github.com/alon710/bbef448ddedc6cabee70ea28e567bc12...
CVE-2018-10032
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...
CVE-2025-10032
A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /index.php. The manipulation of the argument page results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be us...
CVE-2012-10032 Maxthon3 about:history XCS Trusted Zone Code Execution
Maxthon3 version 3.2.2 build 1000 and prior are vulnerable to cross context scripting XCS via the about:history page. The browser’s trusted zone improperly handles injected script content, allowing attackers to execute arbitrary JavaScript in a privileged context. This flaw enables modification o...
CVE-2013-10032
CVE-2013-10032 affects GetSimpleCMS 3.2.1 via upload.php, where authenticated users can upload arbitrary files without proper MIME/extension validation, allowing a disguised .pht containing PHP code to be placed in the web root and executed. Root cause: blacklist-based filtering instead of a whit...
CVE-2024-10032
creationtimestamp| type| source ---|---|--- 2025-07-21 07:07:46+00:00| seen| https://poliverso.org/objects/0477a01e-e25d1f2b-32702de2beb9d6c0...
org.glassfish.main.distributions:glassfish (4.0-b90), org.glassfish.main.distributions:web (4.0-b90) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.0-b90)
org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.0-b90 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.distributions:glassfish 4.0-b90 -...
org.glassfish.main.featuresets:glassfish (4.1), org.glassfish.main.featuresets:web (4.1) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.1)
org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 4.1 -...
org.glassfish.main.featuresets:glassfish (4.1.1), org.glassfish.main.featuresets:web (4.1.1) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.1.1)
org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 4.1.1 -...
org.glassfish.main.featuresets:glassfish (4.1.2), org.glassfish.main.featuresets:web (4.1.2) +1 more potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (4.1.2)
org.glassfish.main.admingui:console-cluster-plugin MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 4.1.2 -...
org.glassfish.main.featuresets:glassfish (5.1.0-rc2), org.glassfish.main.featuresets:web (5.1.0-rc2) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (5.1.0-rc2)
org.glassfish.main.admingui:console-cluster-plugin MAVEN version 5.1.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 5.1.0-rc2 -...
org.glassfish.main.featuresets:glassfish (6.2.2), org.glassfish.main.featuresets:web (6.2.2) potentially affected by CVE-2024-10032 via org.glassfish.main.admingui:console-cluster-plugin (6.2.2)
org.glassfish.main.admingui:console-cluster-plugin MAVEN version 6.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-cluster-plugin and may be impacted: - org.glassfish.main.featuresets:glassfish 6.2.2 -...
CVE-2024-10032
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...
CVE-2024-10032
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...
CVE-2024-10032
In Eclipse GlassFish version 7.0.15 is possible to perform Stored Cross-site scripting attacks in the Administration Console...
CVE-2015-10032
A vulnerability was found in HealthMateWeb. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file createaccount.php. The manipulation of the argument username/password/firstname/lastname/company/phone leads to cross site scripting. The attack...
CVE-2015-10032
creationtimestamp| type| source ---|---|--- 2025-04-09 19:48:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11151...
CVE-2020-8874
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...
MSC-2023-10032
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...