11 matches found
CVE-2026-33162
Craft CMS is a content management system CMS. From version 5.3.0 to before version 5.9.14, an authenticated control panel user with only accessCp can move entries across sections via POST /actions/entries/move-to-section, even when they do not have saveEntries:sectionUid permission for either...
CVE-2022-33162
IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources, at the privilege level of a standard unprivileged user. IBM X-Force I...
CVE-2021-33162
Improper access control in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-33162
creationtimestamp| type| source ---|---|--- 2024-08-16 22:05:06+00:00| seen| https://t.me/cvedetector/3363...
CVE-2022-33162
IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources, at the privilege level of a standard unprivileged user. IBM X-Force I...
CVE-2021-33162
CVE-2021-33162 : Improper access control in some Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Manageability firmware may allow an authenticated local user to escalate privileges. The issue is documented by Intel in advisory Intel-SA-00756 and is rated high (CVSSv3.1 base 8.4). Aff...
Security Updates for Microsoft Excel Products C2R (July 2023)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - Two remote code execution vulnerabilities. CVE-2023-33161, CVE-2023-33158 - An information disclosure vulnerability. CVE-2023-33162 Note that Nessus has not tested for...
CVE-2023-33162 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2023-33162
CVE-2023-33162 is an information disclosure vulnerability in Microsoft Excel. Connected sources confirm a fix via the Office Online Server July 2023 security update KB5002421 (build 16.0.10400.20000) and related Excel updates (e.g., KB5002426 for Excel 2016). The CVE entry notes a local, informat...
CVE-2023-33162 Microsoft Excel Information Disclosure Vulnerability
...
KLA50773 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code...