CVE-2026-10568

creationtimestamp| type| source ---|---|--- 2026-06-02 05:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbturbbnw2v...

CVE-2026-10568

CVE-2026-10568 affects itsourcecode Fees Management System 1.0. The vulnerability is an SQL injection in an unknown function of /manage_payment.php triggered by tampering with the ID parameter. Attackable remotely with network access; the exploit is public. Documentation provides CVSS-derived met...

CVE-2020-10568

The sitepress-multilingual-cms WPML plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of requests that leverage unintended comparisons of integers to strings...

CVE-2024-10568

CVE-2024-10568 affects the WordPress plugin “Ajax Search Lite – Live Search & Filter” (versions before 4.12.4). The issue arises from improper sanitisation/escaping of certain settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) even if unfiltered_html is disallow...

CVE-2024-10568 Ajax Search Lite < 4.12.4 - Admin+ Stored XSS

The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2020-10568

creationtimestamp| type| source ---|---|--- 2022-04-08 13:32:23+00:00| seen| Telegram/ywSsfPjq9T-IlOeCablHYEWhipYiBdBBMaFY0JXNY3xZ9Y...

CVE-2019-10568

...

CVE-2019-10568

CVE-2019-10568 is rejected/not used; this CVE ID is not an active vulnerability entry.

CVE-2020-10905

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-10905

CVE-2020-10905 affects Foxit PhantomPDF 9.7.1.29511. The issue is an out-of-bounds read in U3D vertex handling due to insufficient validation, requiring user interaction (malicious page/file) and potentially enabling code execution when combined with other vulnerabilities. Multiple sources (ZDI-2...

CVE-2020-10905

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-10568

The sitepress-multilingual-cms WPML plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of requests that leverage unintended comparisons of integers to strings...

CVE-2016-10568

geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10568

CVE-2016-10568 affects geoip-lite-country (pre-1.1.4). The library downloads data resources over HTTP, creating vulnerability to man-in-the-middle attacks. Impact ranges from data modification/read to potential code execution depending on the data/resource behavior, per multiple sources. Mitigati...

CVE-2018-10568

XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7...

CVE-2018-10568

Summary: CVE-2018-10568 is a Cross-Site Scripting (XSS) vulnerability affecting Flexense DiskSorter Enterprise versions 9.5.12 through 10.7. The connected CNVD entry explicitly describes an XSS vulnerability that could lead to sensitive information exposure or loss of control of the host. Public ...