Lucene search
K

10 matches found

Circl
Circl
added 2025/09/15 11:2 a.m.7 views

CVE-2025-10436

creationtimestamp| type| source ---|---|--- 2025-09-15 11:02:03+00:00| seen| https://gist.github.com/Darkcrai86/d6f5e9be38573f9d18f69171c5a2e752...

9.8CVSS5.8AI score0.00061EPSS
Exploits1References1
OSV
OSV
added 2025/09/15 10:15 a.m.1 views

CVE-2025-10436

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/supsearchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS5.8AI score
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 10:25 a.m.7 views

CVE-2019-10436

An arbitrary file read vulnerability in Jenkins Google OAuth Credentials Plugin 0.9 and earlier allowed attackers able to configure jobs and credentials in Jenkins to obtain the contents of any file on the Jenkins master...

6.5CVSS6.6AI score0.00146EPSS
Exploits0References1
Circl
Circl
added 2024/10/29 12:15 p.m.0 views

CVE-2024-10436

creationtimestamp| type| source ---|---|--- 2024-10-29 12:15:38+00:00| seen| https://t.me/cvedetector/9278...

8.8CVSS4.8AI score0.01178EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/10/29 12:0 a.m.12 views

WordPress WPC Smart Messages for WooCommerce Plugin <= 4.2.1 is vulnerable to Local File Inclusion

Software WPC Smart Messages for WooCommerce Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.2.2 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-10436 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 61988e9cc775 Credits theviper17y Required...

8.8CVSS6.8AI score0.01178EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2020/03/12 1:4 p.m.41 views

CVE-2020-10436

CVE-2020-10436 affects Chadha PHPKB Standard Multi-Language 9. The vulnerability is a Reflected XSS in the URI handling of admin/header.php, enabling injection of arbitrary scripts/HTML in admin/my-profile.php when a crafted URI containing a leading question mark and payload is used. The Red Hat ...

4.8CVSS4.9AI score0.00321EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2019/10/16 1:0 p.m.65 views

CVE-2019-10436

The CVE-2019-10436 issue affects Jenkins Google OAuth Credentials Plugin up to version 0.9. The vulnerability allows attackers who can configure jobs and credentials in Jenkins to read arbitrary files on the Jenkins master, due to an improper access control path. Public details consistently descr...

6.5CVSS6.2AI score0.00146EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/04/18 2:29 p.m.15 views

CVE-2016-10436

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...

10CVSS8.5AI score0.00206EPSS
Exploits0References2
CVE
CVE
added 2018/04/18 2:0 p.m.49 views

CVE-2016-10436

CVE-2016-10436 affects Android on Qualcomm/Qualcomm-based SoCs (e.g., Qualcomm Small Cell SoC, Snapdragon Mobile and Wear FSM9055; IPQ4019/IPQ8064/MDM92xx/MSM89xx/SD family and related SDX20 devices). The issue is improper input validation on a read path that leads to memory corruption in the aff...

10CVSS8.4AI score0.00206EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2016/10/31 12:0 a.m.2 views

OpenJPEG Denial of Service Vulnerability (CNVD-2016-10436)

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 has a null pointer access vulnerability in the convert.c:1943jp2 imagetopnm function, where image-compscompno.data is not assigned a value after initialization, which can lead to a denial of service...

7.5CVSS6.8AI score0.00478EPSS
Exploits1References1
Rows per page
Query Builder