Lucene search
K

18 matches found

Circl
Circl
added 2025/09/14 1:31 a.m.3 views

CVE-2025-10385

creationtimestamp| type| source ---|---|--- 2025-09-14 01:31:55+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyr5h2ivga2b 2025-09-14 03:21:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrdlv7a222c...

9CVSS8.8AI score0.00209EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 6:34 a.m.3 views

CVE-2014-10385

The memphis-documents-library plugin before 3.0 for WordPress has XSS via $REQUEST...

6.1CVSS6AI score0.0019EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/20 3:52 p.m.8 views

CVE-2024-10385 Stored XSS in DirectAdmin Evo Skin

Ticket management system in DirectAdmin Evolution Skin is vulnerable to XSS Cross-site Scripting, which allows a low-privileged user to inject and store malicious JavaScript code. If an admin views the ticket, the script might perform actions with their privileges, including command execution. ...

8.6CVSS6.1AI score0.00304EPSS
Exploits0References2
CVE
CVE
added 2024/12/20 3:52 p.m.55 views

CVE-2024-10385

CVE-2024-10385 affects DirectAdmin Evolution Skin’s ticket management system. It describes a stored XSS vulnerability that allows a low-privileged user to inject and persist malicious JavaScript; if an admin views the ticket, the script may perform privileged actions, including command execution....

8.6CVSS5.9AI score0.00304EPSS
Exploits0References2
Circl
Circl
added 2023/12/12 2:13 a.m.0 views

CVE-2020-10385

creationtimestamp| type| source ---|---|--- 2023-12-12 02:13:12+00:00| seen| https://t.me/arpsyndicate/1793 2025-08-29 19:46:25+00:00| seen| https://t.me/gjoyh5/168...

5.4CVSS6AI score0.00467EPSS
Exploits6References2
Check Point Advisories
Check Point Advisories
added 2020/03/31 12:0 a.m.4 views

Wordpress WPForms Plugin Cross-Site Scripting (CVE-2020-10385)

A cross-site scripting vulnerability exists in Wordpress WPForms plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

3.5CVSS4.6AI score0.00467EPSS
Exploits6
NVD
NVD
added 2020/03/24 4:15 p.m.13 views

CVE-2020-10385

A stored cross-site scripting XSS vulnerability exists in the WPForms Contact Form aka wpforms-lite plugin before 1.5.9 for WordPress...

5.4CVSS5.2AI score0.00467EPSS
Exploits6References5
exploitpack
exploitpack
added 2020/03/24 12:0 a.m.301 views

Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting

Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting Exploit Title: Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting Date: 2020-02-18 Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson...

5.3AI score0.00467EPSS
Exploits6
Exploit DB
Exploit DB
added 2020/03/24 12:0 a.m.334 views

WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting

Exploit Title: Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting Date: 2020-02-18 Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson Varghese Behanan Author Advisory:...

5.4CVSS5.5AI score0.00467EPSS
Exploits6
0day.today
0day.today
added 2020/03/24 12:0 a.m.325 views

Wordpress WPForms 1.5.9 Plugin - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin WPForms 1.5.9 - Persistent Cross-Site Scripting Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson Varghese Behanan Author Advisor...

5.5AI score0.00467EPSS
Exploits6
Circl
Circl
added 2019/08/22 6:28 p.m.1 views

CVE-2014-10385

creationtimestamp| type| source ---|---|--- 2019-08-22 18:28:43+00:00| seen| https://t.me/cibsecurity/6299...

6.1CVSS6.4AI score0.0019EPSS
Exploits0References1
CVE
CVE
added 2019/08/22 1:20 p.m.44 views

CVE-2014-10385

CVE-2014-10385 affects the memphis-documents-library WordPress plugin prior to version 3.0. The vulnerability is an XSS flaw triggered via the $_REQUEST parameter, allowing an attacker to inject and execute client-side script in affected pages. The impact is described as cross-site scripting; no ...

6.1CVSS6AI score0.0019EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/08/07 2:20 p.m.58 views

CVE-2019-10385

Jenkins eggPlant Plugin 2.2 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master, enabling disclosure to users with Extended Read permission or access to the master filesystem. This is a credentials-情報 disclosure vulnerability affecting the plugin, with the roo...

6.5CVSS6.3AI score0.00167EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2017/10/19 5:29 p.m.14 views

CVE-2017-10385

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

6.8CVSS5.6AI score0.0039EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2017/10/19 5:0 p.m.0 views

CVE-2017-10385

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

5.4AI score0.0039EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2017/10/19 5:0 p.m.27 views

CVE-2017-10385

Removed by vendor...

6.8CVSS6.9AI score0.0039EPSS
Exploits0
CVE
CVE
added 2017/10/19 5:0 p.m.73 views

CVE-2017-10385

CVE-2017-10385 affects Oracle GlassFish Server’s Web Container in Oracle Fusion Middleware 3.0.1 and 3.1.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, with successful attacks requiring user interaction. This can lead to unauthorized...

6.8CVSS5.6AI score0.0039EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2009/10/19 12:0 a.m.15 views

Fedora Core 10 FEDORA-2009-10385 (dopewars)

The remote host is missing an update to dopewars announced via advisory FEDORA-2009-10385. OpenVAS Vulnerability Test $Id: fcore200910385.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10385 dopewars Authors: Thomas Reinke Copyright: Copyright c 20...

5CVSS6.4AI score0.71287EPSS
Exploits3References1
Rows per page
Query Builder