Lucene search
+L

31 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.6 views

CVE-2020-10471

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.8CVSS5.8AI score0.00733EPSS
Exploits1References1
Circl
Circl
added 2025/09/15 5:6 p.m.25 views

CVE-2025-10471

creationtimestamp| type| source ---|---|--- 2025-09-15 17:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyvc5wqlpd2m...

8.8CVSS5.8AI score0.00282EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/15 4:32 p.m.14 views

CVE-2025-10471 ZKEACMS MediaController.cs Proxy server-side request forgery

A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of the argument url results in server-side request forgery. It is possible to initiate the attack remotely. The exploit is now public and may...

6.5CVSS0.00282EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2018-10471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service out-of-bounds zero write and hypervisor crash via...

6.5CVSS7AI score0.84172EPSS
Exploits3References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:20 a.m.8 views

CVE-2024-10471

The Everest Forms WordPress plugin before 3.0.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.6AI score0.00369EPSS
Exploits1References1
OSV
OSV
added 2024/11/26 6:0 a.m.6 views

CVE-2024-10471 Everest Forms < 3.0.4.2 - Admin+ Stored XSS

The Everest Forms WordPress plugin before 3.0.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS7.2AI score0.00369EPSS
Exploits1References3
Patchstack
Patchstack
added 2024/11/26 12:0 a.m.14 views

WordPress Everest Forms Plugin < 3.0.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Everest Forms Type Plugin Vulnerable versions 3.0.4.2 Fixed in 3.0.4.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10471 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 675cfcd37990 Credits Dmitrii Ignatyev Requir...

4.8CVSS6AI score0.00369EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2018:1181-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.84172EPSS
Exploits12References14
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2018:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.84172EPSS
Exploits12References9
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2018:1202-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.84172EPSS
Exploits12References10
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2018:1177-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.84172EPSS
Exploits12References13
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2018:1216-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.84172EPSS
Exploits12References10
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2018:3230-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.84172EPSS
Exploits12References10
NVD
NVD
added 2020/03/12 2:15 p.m.24 views

CVE-2020-10471

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.8CVSS4.9AI score0.00733EPSS
Exploits1References2
CVE
CVE
added 2020/03/12 1:5 p.m.49 views

CVE-2020-10471

CVE-2020-10471 affects Chadha PHPKB Standard Multi-Language 9. It exposes a reflected XSS flaw in admin/manage-articles.php via the GET parameter sort, allowing injection of arbitrary script/HTML. The issue is caused by improper handling/sanitization of the sort parameter. The provided connected ...

4.8CVSS4.8AI score0.00733EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/03/12 1:5 p.m.19 views

CVE-2020-10471

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.9AI score0.00733EPSS
Exploits1References2
CVE
CVE
added 2019/10/23 12:45 p.m.70 views

CVE-2019-10471

CVE-2019-10471 is a cross-site request forgery vulnerability in the Jenkins Libvirt Slaves Plugin. The issue allows an attacker to trigger actions that cause the server to connect to an attacker-specified SSH server using credentials IDs chosen by the attacker, potentially exposing credentials st...

8.8CVSS8.6AI score0.00678EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/10/31 12:0 a.m.39 views

GLSA-201810-06 : Xen: Multiple vulnerabilities (Foreshadow) (Meltdown) (Spectre)

The remote host is affected by the vulnerability described in GLSA-201810-06 Xen: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xen. Please review the referenced CVE identifiers for details. Impact : A local attacker could cause a Denial of Service condition or disclos...

9.9CVSS7.3AI score0.93838EPSS
Exploits13References20
OpenVAS
OpenVAS
added 2018/08/30 12:0 a.m.28 views

Fedora Update for xen FEDORA-2018-683dfde81a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS8.7AI score0.60631EPSS
Exploits11References2
OpenVAS
OpenVAS
added 2018/07/05 12:0 a.m.54 views

Fedora Update for xen FEDORA-2018-a7862a75f5

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS8.6AI score0.60631EPSS
Exploits11References2
Rows per page
Query Builder