https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:42:15.787765+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-330 certfr-2014-avi-330 — De multiples vulnérabilités ont été corrigées dans <span class="textit">phpMyAdmin</span>. Elles permettent à un attaqu… 2026-10-05T17:42:15.898025+00:00 certfr-2014-avi-330 https://cve.radiocsirt.org/vuln/euvd-2026-100428 EUVD-2026-100428 2026-10-05T17:42:15.898066+00:00 EUVD-2026-100428 https://cve.radiocsirt.org/vuln/fkie_cve-2014-4955 fkie_cve-2014-4955 2026-10-05T17:42:15.898082+00:00

Cross-site scripting (XSS) vulnerability in the PMA_TRI_getRowForList function in libraries/rte/rte_list.lib.php in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or HTML via a crafted trigger name that is improperly handled on the database triggers page.

 https://cve.radiocsirt.org/vuln/ghsa-w3p2-mc39-r7v9 GHSA-w3p2-mc39-r7v9 2026-10-05T17:42:15.898110+00:00

Cross-site scripting (XSS) vulnerability in the PMA_TRI_getRowForList function in libraries/rte/rte_list.lib.php in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or HTML via a crafted trigger name that is improperly handled on the database triggers page.

 https://cve.radiocsirt.org/vuln/gsd-2014-4955 gsd-2014-4955 2026-10-05T17:42:15.898127+00:00 gsd-2014-4955 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 openSUSE-SU-2024:10054-1 — phpMyAdmin-4.6.5.2-1.1 on GA media 2026-10-05T17:42:15.898138+00:00

phpMyAdmin-4.6.5.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-4955 UBUNTU-CVE-2014-4955 2026-10-05T17:42:15.898218+00:00

Affected: Ubuntu:Pro:14.04:LTS: phpmyadmin

Cross-site scripting (XSS) vulnerability in the PMA_TRI_getRowForList function in libraries/rte/rte_list.lib.php in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or HTML via a crafted trigger name that is improperly handled on the database triggers page.