CVE-2026-35585

creationtimestamp| type| source ---|---|--- 2026-04-04 07:45:11+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-jvpw-637p-h3pw 2026-04-07 19:33:54+00:00| seen| Telegram/2sVgvXJxKnqdd0t3ix7z2PFFoP4qMIqNMJ7HHwXtd94aJL4 2026-04-14 13:00:04+00:00...

CVE-2022-35585

A stored cross-site scripting XSS issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "startdate" Parameter...

CVE-2020-35585

In Solstice Pod before 3.3.0 or Open4.3, the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Control API because there are only 1.7 million possibilities...

CVE-2021-35585

Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Incentive...

CVE-2022-35585

creationtimestamp| type| source ---|---|--- 2022-08-12 20:33:28+00:00| seen| https://t.me/cibsecurity/48094...

CVE-2022-35585

ForkCMS 5.9.3 is affected by a stored XSS via the start_date parameter. The vulnerability allows remote attackers to inject JavaScript, with exploit noted as requiring user interaction and a network-focused attack surface. A fix is available in ForkCMS 5.11.0, per multiple connected sources (e.g....

CVE-2021-35585

CVE-2021-35585 is a documented vulnerability in the Oracle Incentive Compensation UI of Oracle E-Business Suite. Affected, supported versions are 12.1.1–12.1.3. The issue is exploitable by a low-privilege, network-accessible attacker over HTTP, leading to unauthorized creation/deletion/modificati...

CVE-2021-35585

Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Incentive...

CVE-2020-35585

creationtimestamp| type| source ---|---|--- 2020-12-23 19:25:13+00:00| seen| https://t.me/cibsecurity/21220...

CVE-2020-35585

CVE-2020-35585 affects Solstice Pod before 3.3.0 (or Open4.3). A brute‑force enumeration flaw enables guessing the screen key via the /lookin/info Solstice Open Control API, with only ~1.7 million possibilities. This is the vulnerability described in the CVE; the connected documents confirm the A...