Lucene search
+L

19 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 12:40 p.m.•28 views

CVE-2023-43784

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

7.5CVSS6.9AI score0.00565EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-3934

Malware in sbrugna...

6.1CVSS6.3AI score0.00905EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/09/22 6:15 a.m.•21 views

CVE-2023-43784

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

7.5CVSS5.8AI score0.00565EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/09/22 6:15 a.m.•10 views

CVE-2023-43784

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

7.5CVSS5.9AI score0.00565EPSS
SaveExploits0References3
NVD
NVD
•added 2023/09/22 6:15 a.m.•42 views

CVE-2023-43784

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

7.5CVSS7.6AI score0.00565EPSS
SaveExploits0References2
CVE
CVE
•added 2023/09/22 12:00 a.m.•66 views

CVE-2023-43784

CVE-2023-43784 affects Plesk Onyx 17.8.11 where accessKeyId and secretAccessKey fields are tied to an Amazon AWS Firehose component. Red Hat and other sources confirm the issue; the vendor's position is that there is no security threat. Exploitation information is not provided in the connected do...

7.5CVSS7.5AI score0.00565EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/22 12:00 a.m.•10 views

CVE-2023-43784: Exposure of Resource to Wrong Sphere

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

7.5CVSS7.2AI score0.00565EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/09/22 12:00 a.m.•14 views

CVE-2023-43784

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

7AI score0.00565EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/22 12:00 a.m.•26 views

Plesk Onyx Security Vulnerability

Plesk Onyx is a hosting control panel from Plesk Switzerland. A security vulnerability exists in Plesk Onyx version 17.8.11 that stems from a security issue with the accessKeyId and SecretAccessKey fields associated with the Amazon AWS Firehose component...

7.5CVSS6.7AI score0.00565EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/09/22 12:00 a.m.•48 views

CVE-2023-43784

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

7.8AI score0.00565EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/09/21 12:00 a.m.•43 views

PT-2023-28982 · Plesk +1 · Plesk Onyx +1

Name of the Vulnerable Software and Affected Versions: Plesk Onyx version 17.8.11 Description: The issue is related to the presence of accessKeyId and secretAccessKey fields in the Amazon AWS Firehose component. However, the vendor's position is that there is no security threat. Recommendations:...

7.5CVSS7AI score0.00565EPSS
SaveExploits0References6
CNVD
CNVD
•added 2020/08/05 12:00 a.m.•16 views

Plesk Onyx Cross-Site Scripting Vulnerability

Plesk Onyx is a hosting control panel from the Swiss company Plesk. A cross-site scripting vulnerability exists in Plesk Onyx version 17.8.11. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute...

6.1CVSS6.4AI score0.00905EPSS
SaveExploits0References1
NVD
NVD
•added 2020/08/03 9:15 p.m.•28 views

CVE-2020-11584

A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...

6.1CVSS6.1AI score0.00905EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/08/03 9:15 p.m.•18 views

CVE-2020-11584

A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...

6.1CVSS6.5AI score0.00905EPSS
SaveExploits0References1
Prion
Prion
•added 2020/08/03 9:15 p.m.•24 views

Cross site scripting

A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...

4.3CVSS6AI score0.00905EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/08/03 8:05 p.m.•37 views

CVE-2020-11584

A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...

6.1AI score0.00905EPSS
SaveExploits0References1
CVE
CVE
•added 2020/08/03 8:05 p.m.•80 views

CVE-2020-11584

CVE-2020-11584 describes a GET-based reflected XSS in Plesk Onyx 17.8.11 . The vulnerability allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. The connected documents confirm the affected product/version and the nature of the flaw, but do not pr...

6.1CVSS6AI score0.00905EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/03 12:00 a.m.•8 views

CVE-2020-11584: Improper Neutralization of Input During Web Page Generation

A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter...

6.1CVSS5.9AI score0.00905EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/08/03 12:00 a.m.•5 views

PT-2020-12700

Name of the Vulnerable Software and Affected Versions Plesk Onyx version 17.8.11 Description A GET-based XSS reflected issue allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. This enables attackers to execute malicious code on the victim's...

6.1CVSS0.00905EPSS
SaveExploits0References5
Rows per page
Query Builder