Lucene search
K

15 matches found

Circl
Circl
added 2025/11/27 12:41 p.m.4 views

CVE-2025-10476

creationtimestamp| type| source ---|---|--- 2025-11-27 12:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6mffcqojv2n...

4.3CVSS5.8AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-10476

Malware in sbrugna...

7.8CVSS8AI score0.01079EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2025/05/22 7:46 a.m.5 views

CVE-2019-10476

Jenkins Zulip Plugin 1.1.0 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

7.8CVSS6.5AI score0.00012EPSS
Exploits0References1
NVD
NVD
added 2024/12/17 4:15 p.m.8 views

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...

8CVSS0.00159EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/17 3:16 p.m.13 views

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...

8CVSS0.00159EPSS
Exploits0References1
CVE
CVE
added 2024/12/17 3:16 p.m.43 views

CVE-2024-10476

CVE-2024-10476 concerns default credentials in BD Diagnostic Solutions products. The BD advisories and cross-ref entries state that attackers could access, modify, or delete data (including PHI/PII) and potentially disrupt availability. The scope notes that BD Synapsys Informatics Solution is in ...

8CVSS6.5AI score0.00159EPSS
Exploits0References1
OSV
OSV
added 2020/03/12 2:15 p.m.1 views

CVE-2020-10476

Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.8CVSS5.9AI score0.00321EPSS
Exploits1References2
NVD
NVD
added 2020/03/12 2:15 p.m.12 views

CVE-2020-10476

Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.8CVSS4.9AI score0.00321EPSS
Exploits1References2
Cvelist
Cvelist
added 2020/03/12 1:5 p.m.15 views

CVE-2020-10476

Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.9AI score0.00321EPSS
Exploits1References2
CVE
CVE
added 2020/03/12 1:5 p.m.36 views

CVE-2020-10476

CVE-2020-10476 is a reflected cross-site scripting vulnerability in Chadha PHPKB Standard Multi-Language 9. The flaw resides in admin/manage-glossary.php, where an unsanitized GET parameter sort can inject arbitrary web script or HTML. Red Hat and CNVD entries corroborate the same issue. Impact i...

4.8CVSS4.8AI score0.00321EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2019/10/23 1:15 p.m.15 views

CVE-2019-10476

Jenkins Zulip Plugin 1.1.0 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

7.8CVSS6.7AI score
Exploits0References2
CVE
CVE
added 2019/10/23 12:45 p.m.59 views

CVE-2019-10476

Jenkins Zulip Plugin versions 1.1.0 and earlier are affected by a vulnerability where credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master, allowing users with access to the master filesystem to view them. Root cause: plaintext storage of credentials ...

7.8CVSS7.5AI score0.00012EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2018/05/24 12:0 a.m.5 views

WordPress SQL Injection Vulnerability (CNVD-2018-10476)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from an information disclosure vulnerability. By exploiting this vulnerability, an attacker can perform SQL...

8.8CVSS7.2AI score0.00666EPSS
Exploits5References1
CVE
CVE
added 2018/05/17 3:0 p.m.46 views

CVE-2018-10476

Foxit Reader 9.0.0.29935 is affected by an information-disclosure vulnerability in the U3D Model Node parsing. The issue stems from improper validation of user-supplied data, causing a read past the end of an allocated structure (out-of-bounds read). An attacker can leverage this by convincing a ...

6.5CVSS6.5AI score0.00212EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2018/04/18 2:0 p.m.49 views

CVE-2016-10476

CVE-2016-10476 affects Android on Qualcomm Snapdragon/mobile platforms (e.g., MSM/SD family). The issue is missing array index checks on the app index in function qcril_uim_clear_encrypted_pin, causing out-of-bounds reads when the app index is too large. Documented in multiple sources as a vulner...

10CVSS8.6AI score0.00296EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder