21 matches found
CVE-2025-24533
Cross-Site Request Forgery CSRF vulnerability in MetaSlider Responsive Slider by MetaSlider ml-slider allows Cross Site Request Forgery.This issue affects Responsive Slider by MetaSlider: from n/a through = 3.92.0...
CVE-2023-24533
Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this...
CVE-2025-24533
Cross-Site Request Forgery CSRF vulnerability in MetaSlider Responsive Slider by MetaSlider ml-slider allows Cross Site Request Forgery.This issue affects Responsive Slider by MetaSlider: from n/a through = 3.92.0...
CVE-2025-24533
creationtimestamp| type| source ---|---|--- 2025-01-27 14:08:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113900710198750560 2025-01-27 14:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgq4vyfecg2j 2025-01-27 14:55:05+00:00| seen|...
CVE-2020-24533
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
CVE-2023-24533
creationtimestamp| type| source ---|---|--- 2023-03-08 22:24:06+00:00| seen| https://t.me/cibsecurity/59693...
CVE-2023-24533
CVE-2023-24533 concerns a flaw in the nistec P-256 scalar multiplication implementation (notably in filippo.io/nistec) where multiplication of certain unreduced P-256 scalars yields incorrect results. Connected data describe the root cause: the P-256 assembly path does not use complete addition f...
CVE-2023-24533 Incorrect multiplication of unreduced P-256 scalars in filippo.io/nistec
Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this...
CVE-2022-24533
creationtimestamp| type| source ---|---|--- 2022-06-20 11:04:41+00:00| seen| https://t.me/itsecnews/860...
CVE-2022-24533
Remote Desktop Protocol Remote Code Execution Vulnerability...
CVE-2022-24533
Remote Desktop Protocol Remote Code Execution Vulnerability...
CVE-2022-24533 Remote Desktop Protocol Remote Code Execution Vulnerability
...
CVE-2022-24533
Technical details about CVE-2022-24533 (affected products, components, root cause, versions, fixes) are not provided in the connected documents. The available materials only reiterate a Remote Desktop Protocol RCE without specifics. Monitor for updates.
CVE-2022-24533 Remote Desktop Protocol Remote Code Execution Vulnerability
...
KB5012653: Windows 10 version 1507 LTS Security Update (April 2022)
The remote Windows host is missing security update 5012653. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-26798, CVE-2022-26801, CVE-2022-26786, CVE-2022-24549, CVE-2022-26794,...
KB5012666: Windows Server 2012 Security Update (April 2022)
The remote Windows host is missing security update 5012666 or cumulative update 5012650. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
KB5012670: Windows 8.1 and Windows Server 2012 R2 Security Update (April 2022)
The remote Windows host is missing security update 5012639 or cumulative update 5012670. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24474, CVE-2022-24481, CVE-2022-24494,...
CVE-2021-24533
CVE-2021-24533 affects the WordPress Maintenance plugin prior to version 4.03. The issue is an authenticated stored XSS where high-privilege users (e.g., admin) can inject payloads into certain plugin settings due to insufficient sanitization/escaping, with the payload triggered in the frontend e...
CVE-2021-24533 Maintenance < 4.03 - Authenticated Stored XSS
The Maintenance WordPress plugin before 4.03 does not sanitise or escape some of its settings, allowing high privilege users such as admin to se Cross-Site Scripting payload in them even when the unfilteredhtml capability is disallowed, which will be triggered in the frontend...
CVE-2020-24533
...