11 matches found
CVE-2026-33121
creationtimestamp| type| source ---|---|--- 2026-04-16 21:19:58+00:00| published-proof-of-concept| Telegram/9gW43b9NBHUXUdmlPt1TRwT-SkC94TdNTb4ccUrHaSNYF5M 2026-04-20 19:10:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjx6b4gneo2n 2026-04-20 22:00:12+00:00| seen|...
CVE-2026-33121
DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the API datasource saving process. The deTableName field from the Base64-encoded datasource configuration is used to construct a DDL statement via simple strin...
CVE-2025-33121 IBM QRadar SIEM XML external entity injection
IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...
CVE-2024-33121
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...
CVE-2021-33121
creationtimestamp| type| source ---|---|--- 2024-02-23 22:27:05+00:00| seen| https://t.me/ctinow/192223...
CVE-2023-33121
Siemens JT2Go and Teamcenter Visualization are affected by a null pointer dereference while parsing specially crafted CGM files (CVE-2023-33121) across multiple versions: JT2Go < 14.2.0.3; Teamcenter Visualization <13.2.0.13, <13.3.0.10, <14.0.0.6, <14.1.0.8,
CVE-2023-33121
A vulnerability has been identified in JT2Go All versions V14.2.0.3, Teamcenter Visualization V13.2 All versions V13.2.0.13, Teamcenter Visualization V13.3 All versions V13.3.0.10, Teamcenter Visualization V14.0 All versions V14.0.0.6, Teamcenter Visualization V14.1 All versions V14.1.0.8,...
CVE-2022-33121
A CSRF vulnerability in MiniCMS v1.11 allows attackers to delete local .dat files by clicking a malicious link. This has been reported across multiple feeds (including CNVD, Red Hat, NVD/OSV, CVE lists). The root cause is a CSRF in MiniCMS v1.11; there are no public exploit details within the pro...
Tenda M3 Command Injection Vulnerability (CNVD-2022-33121)
Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setAdInfoDetail fails to properly filter the construction of command special characters, commands, etc., and can be exploited by attackers to cause...
CVE-2021-33121
...
CVE-2021-33121
CVE-2021-33121 entry is rejected and not used as stated in the Initial Description.