CVE-2026-33005

Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields...

CVE-2026-33005 Apache OpenMeetings: Insufficient checks in FileWebService

Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields...

CVE-2026-33005

creationtimestamp| type| source ---|---|--- 2026-04-09 14:58:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj32zfz6ak2l...

CVE-2024-33005

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server ABAP and Java, and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a...

CVE-2023-33005

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login...

CVE-2023-33005

creationtimestamp| type| source ---|---|--- 2025-01-23 16:03:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2760...

CVE-2024-33005

creationtimestamp| type| source ---|---|--- 2024-08-13 07:04:08+00:00| seen| https://t.me/cvedetector/2957...

CVE-2024-33005 Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server ABAP and Java, and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a...

CVE-2024-33005 Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server ABAP and Java, and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a...

CVE-2023-33005

CVE-2023-33005 concerns the Jenkins WSO2 Oauth Plugin (1.0 and earlier) not invalidating a previous login session, creating a session-fixation risk. The vulnerability is described across multiple sources as allowing an attacker to reuse an existing authenticated session or trick a user into a log...

CVE-2023-33005

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login...

CVE-2022-33005

creationtimestamp| type| source ---|---|--- 2022-06-28 00:35:03+00:00| seen| https://t.me/cibsecurity/45227...

CVE-2022-33005

A cross-site scripting XSS vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...

CVE-2022-33005

Delta Electronics DIAEnergie v1.08.00 contains an XSS vulnerability in the System Settings/IOT Settings module, exploitable via a crafted payload in the Name field. The issue is described across multiple sources (including CVE-2022-33005 entries and Red Hat advisory) as a cross-site scripting fla...

CVE-2021-33005

creationtimestamp| type| source ---|---|--- 2022-05-13 20:27:16+00:00| seen| https://t.me/cibsecurity/42690...

CVE-2021-33005

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories...

CVE-2021-33005 mySCADA myPRO Path Traversal

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories...

CVE-2021-33005

CVE-2021-33005 is a path traversal vulnerability in mySCADA myPRO prior to version 8.20.0. An unauthenticated remote attacker can upload arbitrary files to arbitrary directories by exploiting improper filtering of path components. Affected product: mySCADA myPRO (industrial HMI/SCADA). Impact des...

CVE-2021-33005 mySCADA myPRO Path Traversal

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories...