https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:33:28.580015+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-103110 EUVD-2026-103110 2026-10-05T05:33:28.585494+00:00 EUVD-2026-103110 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8326 fkie_cve-2014-8326 2026-10-05T05:33:28.585529+00:00

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the libraries/DatabaseInterface.class.php code for SQL debug output and the js/server_status_monitor.js code for the server monitor page.

 https://cve.radiocsirt.org/vuln/ghsa-pvr5-84gr-g985 GHSA-pvr5-84gr-g985 — phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page 2026-10-05T05:33:28.585561+00:00

Affected: Packagist: phpmyadmin/phpmyadmin

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the `libraries/DatabaseInterface.class.php` code for SQL debug output and the `js/server_status_monitor.js` code for the server monitor page.

 https://cve.radiocsirt.org/vuln/gsd-2014-8326 gsd-2014-8326 2026-10-05T05:33:28.585587+00:00 gsd-2014-8326 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 openSUSE-SU-2024:10054-1 — phpMyAdmin-4.6.5.2-1.1 on GA media 2026-10-05T05:33:28.585600+00:00

phpMyAdmin-4.6.5.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-8326 UBUNTU-CVE-2014-8326 2026-10-05T05:33:28.585646+00:00

Affected: Ubuntu:Pro:14.04:LTS: phpmyadmin

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the libraries/DatabaseInterface.class.php code for SQL debug output and the js/server_status_monitor.js code for the server monitor page.