Lucene search
+L

49 matches found

OSV
OSV
added 2020/03/12 2:15 p.m.6 views

CVE-2020-10465

Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...

4.8CVSS5.9AI score0.00611EPSS
SaveExploits1References2
CVE
CVE
added 2020/03/12 1:5 p.m.46 views

CVE-2020-10465

Chadha PHPKB Standard Multi-Language v9 is affected by a reflected XSS in admin/edit-category.php, exploitable via the GET parameter p to inject arbitrary script/HTML. Root cause is improper handling of user input in the p parameter. Impact is XSS in web contexts, potentially affecting admin-faci...

4.8CVSS4.8AI score0.00611EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2020/01/07 6:58 p.m.82 views

CVE-2018-10465

CVE-2018-10465 affects Jamf Pro 10.x before 10.3.0, where users with login access had full CRUD rights to the Universal API (UAPI) endpoints, regardless of privileges. Root cause: Incorrect Access Control allowing unauthorized information disclosure, compromised data integrity, and potential data...

8.8CVSS8.2AI score0.01213EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/10/23 1:15 p.m.15 views

CVE-2019-10465

A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file syste...

4.3CVSS6.8AI score
SaveExploits0References2
CVE
CVE
added 2019/10/23 12:45 p.m.64 views

CVE-2019-10465

CVE-2019-10465 affects the Jenkins Deploy WebLogic Plugin. The vulnerability is a missing permission check that allows users with Overall/Read access to connect to an attacker‑specified URL using attacker‑specified credentials or to probe for the existence of files/dirs on the Jenkins master file...

4.3CVSS4.3AI score0.00788EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/10/23 12:45 p.m.33 views

CVE-2019-10465

A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file syste...

4.4AI score0.00788EPSS
SaveExploits0References2
CVE
CVE
added 2019/08/30 3:13 p.m.304 views

CVE-2016-10465

CVE-2016-10465 entry is rejected/not used according to the Initial Description.

6.7AI score
SaveExploits0
Cvelist
Cvelist
added 2019/08/30 3:13 p.m.10 views

CVE-2016-10465

...

SaveExploits0
CNVD
CNVD
added 2019/03/05 12:0 a.m.6 views

Google Android System Information Disclosure Vulnerability (CNVD-2019-10465)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. System in Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to disclose information...

7.1CVSS6.1AI score0.00779EPSS
SaveExploits0References1
Rows per page
Query Builder