Lucene search
K

31 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.2 views

CVE-2020-10471

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.8CVSS5.8AI score0.00321EPSS
Exploits1References1
Circl
Circl
added 2025/09/15 5:6 p.m.5 views

CVE-2025-10471

creationtimestamp| type| source ---|---|--- 2025-09-15 17:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyvc5wqlpd2m...

8.8CVSS5.8AI score0.00083EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/15 4:32 p.m.5 views

CVE-2025-10471 ZKEACMS MediaController.cs Proxy server-side request forgery

A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of the argument url results in server-side request forgery. It is possible to initiate the attack remotely. The exploit is now public and may...

6.5CVSS0.00083EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2018-10471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service out-of-bounds zero write and hypervisor crash via...

6.5CVSS7AI score0.89595EPSS
Exploits3References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:20 a.m.4 views

CVE-2024-10471

The Everest Forms WordPress plugin before 3.0.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.6AI score0.00131EPSS
Exploits1References1
OSV
OSV
added 2024/11/26 6:15 a.m.3 views

CVE-2024-10471

The Everest Forms WordPress plugin before 3.0.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.5AI score
Exploits0References1
Patchstack
Patchstack
added 2024/11/26 12:0 a.m.8 views

WordPress Everest Forms Plugin < 3.0.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Everest Forms Type Plugin Vulnerable versions 3.0.4.2 Fixed in 3.0.4.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10471 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 675cfcd37990 Credits Dmitrii Ignatyev Requir...

4.8CVSS6AI score0.00131EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2018:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.89595EPSS
Exploits12References9
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2018:1181-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.89595EPSS
Exploits12References14
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2018:1202-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.89595EPSS
Exploits12References10
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2018:1216-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.89595EPSS
Exploits12References10
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2018:1177-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.89595EPSS
Exploits12References13
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2018:3230-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.89595EPSS
Exploits12References10
NVD
NVD
added 2020/03/12 2:15 p.m.7 views

CVE-2020-10471

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.8CVSS4.9AI score0.00321EPSS
Exploits1References2
CVE
CVE
added 2020/03/12 1:5 p.m.42 views

CVE-2020-10471

CVE-2020-10471 affects Chadha PHPKB Standard Multi-Language 9. It exposes a reflected XSS flaw in admin/manage-articles.php via the GET parameter sort, allowing injection of arbitrary script/HTML. The issue is caused by improper handling/sanitization of the sort parameter. The provided connected ...

4.8CVSS4.8AI score0.00321EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/03/12 1:5 p.m.9 views

CVE-2020-10471

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.9AI score0.00321EPSS
Exploits1References2
CVE
CVE
added 2019/10/23 12:45 p.m.59 views

CVE-2019-10471

CVE-2019-10471 is a cross-site request forgery vulnerability in the Jenkins Libvirt Slaves Plugin. The issue allows an attacker to trigger actions that cause the server to connect to an attacker-specified SSH server using credentials IDs chosen by the attacker, potentially exposing credentials st...

8.8CVSS8.6AI score0.00093EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/10/31 12:0 a.m.37 views

GLSA-201810-06 : Xen: Multiple vulnerabilities (Foreshadow) (Meltdown) (Spectre)

The remote host is affected by the vulnerability described in GLSA-201810-06 Xen: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xen. Please review the referenced CVE identifiers for details. Impact : A local attacker could cause a Denial of Service condition or disclos...

9.9CVSS7.3AI score0.9427EPSS
Exploits12References20
OpenVAS
OpenVAS
added 2018/08/30 12:0 a.m.27 views

Fedora Update for xen FEDORA-2018-683dfde81a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS8.7AI score0.46733EPSS
Exploits14References2
OpenVAS
OpenVAS
added 2018/07/05 12:0 a.m.53 views

Fedora Update for xen FEDORA-2018-a7862a75f5

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS8.6AI score0.46733EPSS
Exploits14References2
Rows per page
Query Builder