Lucene search
K

13 matches found

Circl
Circl
added 2026/06/02 9:2 p.m.6 views

CVE-2026-10584

creationtimestamp| type| source ---|---|--- 2026-06-02 21:02:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mndijydnwa2f...

8.2CVSS5.8AI score0.00101EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.8 views

CVE-2020-10584

A directory traversal on the /admin/searchby.php script of Invigo Automatic Device Management ADM through 5.0 allows remote attackers to read arbitrary server files accessible to the user running the application...

7.5CVSS7.1AI score0.02197EPSS
Exploits0References1
Circl
Circl
added 2025/09/17 7:29 a.m.6 views

CVE-2025-10584

creationtimestamp| type| source ---|---|--- 2025-09-17 07:29:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzct4bjfe2o...

5.4CVSS4AI score0.00261EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:49 a.m.8 views

CVE-2019-10584

Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

7.8CVSS7.2AI score0.00189EPSS
Exploits0References1
Circl
Circl
added 2024/12/24 11:11 a.m.6 views

CVE-2024-10584

creationtimestamp| type| source ---|---|--- 2024-12-24 11:11:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113707496947756711 2024-12-24 11:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2cxlujee2m 2024-12-24 12:43:57+00:00| seen|...

5.4CVSS8.7AI score0.00283EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/12/24 11:9 a.m.7 views

CVE-2024-10584 DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting

The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.6.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

5.4CVSS5.2AI score0.00283EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/12/24 11:9 a.m.15 views

CVE-2024-10584 DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting

The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.6.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

5.4CVSS0.00283EPSS
Exploits0References2
CVE
CVE
added 2021/03/25 7:47 p.m.51 views

CVE-2020-10584

CVE-2020-10584 is a directory traversal vulnerability affecting Invigo Automatic Device Management (ADM) via the /admin/search_by.php script, reported for ADM 5.0 and earlier. The root cause is directory traversal that allows remote attackers to read arbitrary files on the server accessible to th...

7.5CVSS7.5AI score0.02197EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/12/18 5:25 a.m.94 views

CVE-2019-10584

CVE-2019-10584 affects Qualcomm/Snapdragon components (Snapdragon Auto, Compute, Connectivity, Consumer IOT/Industrial IOT, Mobile, Wearables, etc.) with an out-of-bounds access in the debug queue when the packet size field is corrupted. The issue is documented across multiple vendors, including ...

7.8CVSS8.2AI score0.00189EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/05/29 8:29 p.m.3 views

CVE-2016-10584

dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...

8.1CVSS6.3AI score
Exploits0References1
NVD
NVD
added 2018/05/29 8:29 p.m.26 views

CVE-2016-10584

dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...

9.3CVSS8.3AI score0.02061EPSS
Exploits0References1
CVE
CVE
added 2018/05/29 8:0 p.m.59 views

CVE-2016-10584

The CVE-2016-10584 entry concerns dalek-browser-chrome-canary, a Google Chrome binding for DalekJS. The vulnerability arises because it downloads binary resources over HTTP, enabling a man-in-the-middle (MitM) attacker to swap the requested binary with malware, potentially causing remote code exe...

9.3CVSS8.2AI score0.02061EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2010/07/12 12:0 a.m.28 views

Fedora Update for avahi FEDORA-2010-10584

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS7.7AI score0.02636EPSS
Exploits1References2
Rows per page
Query Builder