https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:52:17.653086+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-04396 cnvd-2016-04396 2026-10-05T06:52:17.659149+00:00 cnvd-2016-04396 https://cve.radiocsirt.org/vuln/euvd-2026-85340 EUVD-2026-85340 2026-10-05T06:52:17.659186+00:00 EUVD-2026-85340 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5733 fkie_cve-2016-5733 2026-10-05T06:52:17.659201+00:00

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted table name that is mishandled during privilege checking in table_row.phtml, (2) a crafted mysqld log_bin directive that is mishandled in log_selector.phtml, (3) the Transformation implementation, (4) AJAX error handling in js/ajax.js, (5) the Designer implementation, (6) the charts implementation in js/tbl_chart.js, or (7) the zoom-search implementation in rows_zoom.phtml.

 https://cve.radiocsirt.org/vuln/ghsa-cr65-p662-fx5c GHSA-cr65-p662-fx5c — phpMyAdmin vulnerable to Cross-site Scripting 2026-10-05T06:52:17.659249+00:00

Affected: Packagist: phpmyadmin/phpmyadmin

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted table name that is mishandled during privilege checking in table_row.phtml, (2) a crafted mysqld log_bin directive that is mishandled in log_selector.phtml, (3) the Transformation implementation, (4) AJAX error handling in js/ajax.js, (5) the Designer implementation, (6) the charts implementation in js/tbl_chart.js, or (7) the zoom-search implementation in rows_zoom.phtml.

 https://cve.radiocsirt.org/vuln/gsd-2016-5733 gsd-2016-5733 2026-10-05T06:52:17.659278+00:00 gsd-2016-5733 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 openSUSE-SU-2024:10054-1 — phpMyAdmin-4.6.5.2-1.1 on GA media 2026-10-05T06:52:17.659290+00:00

phpMyAdmin-4.6.5.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5733 UBUNTU-CVE-2016-5733 2026-10-05T06:52:17.659339+00:00

Affected: Ubuntu:Pro:14.04:LTS: phpmyadmin, Ubuntu:Pro:16.04:LTS: phpmyadmin

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted table name that is mishandled during privilege checking in table_row.phtml, (2) a crafted mysqld log_bin directive that is mishandled in log_selector.phtml, (3) the Transformation implementation, (4) AJAX error handling in js/ajax.js, (5) the Designer implementation, (6) the charts implementation in js/tbl_chart.js, or (7) the zoom-search implementation in rows_zoom.phtml.