Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:53 a.m.4 views

CVE-2020-10439

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-article-discussed.php by adding a question mark ? followed by the payload...

4.8CVSS6.1AI score0.00321EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/09/19 12:31 p.m.4 views

CVE-2025-10439

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yordam Informatics Yordam Library Automation System allows SQL Injection.This issue affects Yordam Library Automation System: from 21.5 & 21.6 before 21.7...

9.8CVSS7.6AI score0.00055EPSS
Exploits0References1
Circl
Circl
added 2025/09/17 12:44 p.m.1 views

CVE-2025-10439

creationtimestamp| type| source ---|---|--- 2025-09-17 12:44:40+00:00| seen| Telegram/JNSKhWiS83MpnfiWwYNmeSX-S389bMJHGyr4FTrXgHmapk...

9.8CVSS4.8AI score0.00055EPSS
Exploits0
CVE
CVE
added 2025/09/17 11:45 a.m.13 views

CVE-2025-10439

CVE-2025-10439 affects Yordam Informatics Yordam Library Automation System. The vulnerability is a SQL Injection due to improper neutralization of special elements in the SQL command. Affected versions are 21.5 and 21.6 prior to 21.7. The issue can lead to high-impact compromise of confidentialit...

9.8CVSS5.6AI score0.00055EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 6:58 a.m.4 views

CVE-2019-10439

A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins...

4.3CVSS6.4AI score0.00031EPSS
Exploits0References1
Circl
Circl
added 2024/10/28 5:17 a.m.0 views

CVE-2024-10439

creationtimestamp| type| source ---|---|--- 2024-10-28 05:17:15+00:00| seen| https://t.me/cvedetector/9088...

7.5CVSS4.8AI score0.00229EPSS
Exploits0References1
OSV
OSV
added 2024/10/28 3:15 a.m.1 views

CVE-2024-10439

The eHRD CTMS from Sunnet has an Insecure Direct Object Reference IDOR vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to access arbitrary files uploaded by any user...

7.5CVSS6AI score0.00229EPSS
Exploits0References2
CNVD
CNVD
added 2024/01/26 12:0 a.m.31 views

Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2024-10439)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

4.3CVSS6.9AI score0.01842EPSS
Exploits0References1
NVD
NVD
added 2020/03/12 2:15 p.m.9 views

CVE-2020-10439

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-article-discussed.php by adding a question mark ? followed by the payload...

4.8CVSS5AI score0.00321EPSS
Exploits1References2
CVE
CVE
added 2020/03/12 1:4 p.m.43 views

CVE-2020-10439

The vulnerability CVE-2020-10439, described across Red Hat advisories, is a Reflected XSS flaw in Chadha PHPKB Standard Multi-Language 9. It arises from how URIs are handled in admin/header.php, enabling an attacker to inject arbitrary script/HTML when accessing specific admin pages. Concrete imp...

4.8CVSS4.9AI score0.00321EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2019/10/16 2:15 p.m.11 views

CVE-2019-10439

A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins...

4.3CVSS6.6AI score
Exploits0References1
NVD
NVD
added 2019/10/16 2:15 p.m.10 views

CVE-2019-10439

A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins...

4.3CVSS4.5AI score0.00031EPSS
Exploits0References1
CVE
CVE
added 2019/10/16 1:0 p.m.72 views

CVE-2019-10439

The CVE-2019-10439 issue affects Jenkins CRX Content Package Deployer Plugin, with vulnerable versions ≤ 1.8.1. A missing permission check in various doFillCredentialsIdItems methods allows users with Overall/Read access to enumerate credentials IDs stored in Jenkins. Exploitation context is not ...

4.3CVSS4.4AI score0.00031EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/04/18 2:0 p.m.93 views

CVE-2016-10439

The CVE-2016-10439 issue is a TOCTOU vulnerability in the bulletin_board_read input validation on Qualcomm Snapdragon Automotive and Mobile platforms (SD 425, 430, 450, 625, 650/52, 820, 820A) where a pointer dereference may be validated after the HLOS could modify the pointer. Affected Android r...

9.3CVSS8.1AI score0.00137EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2009/10/19 12:0 a.m.18 views

Fedora Core 11 FEDORA-2009-10439 (dopewars)

The remote host is missing an update to dopewars announced via advisory FEDORA-2009-10439. OpenVAS Vulnerability Test $Id: fcore200910439.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10439 dopewars Authors: Thomas Reinke Copyright: Copyright c 20...

5CVSS6.4AI score0.71287EPSS
Exploits3References1
Rows per page
Query Builder