CVE-2020-10440

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-article-mailed.php by adding a question mark ? followed by the payload...

CVE-2024-10440

creationtimestamp| type| source ---|---|--- 2024-10-28 05:17:15+00:00| seen| https://t.me/cvedetector/9089...

CVE-2020-10440

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-article-mailed.php by adding a question mark ? followed by the payload...

CVE-2020-10440

The connected Red Hat advisories confirm CVE-2020-10440 affects Chadha PHPKB Standard Multi-Language 9, where URIs are mishandled in admin/header.php, enabling Reflected XSS in admin/report-article-mailed.php via a crafted query (?payload). This is a reflected XSS through URI handling, allowing a...

CVE-2019-10440

Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10440

CVE-2019-10440 affects the Jenkins NeoLoad Plugin (versions up to and including 2.2.5). The vulnerability consists of credentials stored in plaintext in the plugin’s global configuration and in job config.xml on the Jenkins master, allowing disclosure to users with Extended Read permission or any...

CVE-2019-10440

Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system...

CVE-2016-10440

CVE-2016-10440 describes an Android/Qualcomm bus-access control flaw: improper access control to a bus on Snapdragon Mobile SD 425, 430, 450, 625, 650/52. The root cause is a bus access control weakness that could allow a network-adjacent attacker to compromise confidentiality, integrity, and ava...