19 matches found
EUVD-2022-2971
Malicious code in bioql PyPI...
CVE-2025-10343
creationtimestamp| type| source ---|---|--- 2025-09-29 08:59:30+00:00| seen| Telegram/4OMWJpKE2w9g-n5c5Bmm3U216JRCxlSJUgG7cHeb3TMFlo...
CVE-2025-10343
CVE-2025-10343 describes a stored HTML injection in Perfex CRM v3.2.1 caused by insufficient validation of user input. An attacker can inject HTML by sending a POST request to the /expenses/expense endpoint, with the malicious content in the expense_name parameter. The connected sources confirm P...
CVE-2019-10343
Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the configuration being applied...
CVE-2024-10343
creationtimestamp| type| source ---|---|--- 2024-10-25 12:04:01+00:00| seen| https://t.me/cvedetector/8914...
CVE-2024-10343 Beek Widget Extention <= 0.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Beek Widget Extention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 0.9.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2024-10343 Beek Widget Extention <= 0.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Beek Widget Extention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 0.9.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
WordPress Beek Widget Extention Plugin <= 0.9.5 is vulnerable to Cross Site Scripting (XSS)
Software Beek Widget Extention Type Plugin Vulnerable versions = 0.9.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10343 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b42322ec0960 Credits István Márton...
CVE-2018-10343
CVE-2018-10343 is rejected/not used; the entry does not represent an active vulnerability.
Authorization
Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied...
CVE-2019-10367: Insertion of Sensitive Information into Log File
Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied...
CVE-2019-10343
Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the configuration being applied...
CVE-2019-10343
Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the configuration being applied...
CVE-2019-10343
The CVE-2019-10343 entry concerns Jenkins Configuration as Code Plugin (versions 1.24 and earlier) where masking was not applied to values that should be hidden when logging the configuration being applied. Connected records (Red Hat and OSV attestations) reiterate that an incomplete fix in 1.26 ...
CVE-2017-10343
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Import/Export. Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10343
The CVE-2017-10343 entry concerns Oracle Hospitality Simphony (Import/Export subcomponent). Affected versions are 2.8 and 2.9. The vulnerability is exploitable over HTTP with network access by an unauthenticated attacker; exploitation requires human interaction from a user other than the attacker...
CVE-2017-10343
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Import/Export. Supported versions that are affected are 2.8 and 2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2016-10343
CVE-2016-10343 describes a memory leak in Qualcomm components across Android CAF builds when an SSL handshake failure with ClientHello rejection occurs. Affected are Qualcomm-provided, closed-source components used in Qualcomm-based Android devices; root cause is memory being leaked during the TL...