12 matches found
CVE-2023-33652
Sitecore Experience Platform XP v9.3 was discovered to contain an authenticated remote code execution RCE vulnerability via the component /sitecore/shell/Invoke.aspx...
CVE-2021-33652
When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...
CVE-2023-33652
creationtimestamp| type| source ---|---|--- 2025-01-08 15:14:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/704...
WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Broken Access Control
Software Client Dash Type Plugin Vulnerable versions = 2.2.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33652 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 999732255bed Credits Skalucy Required privilege...
CVE-2023-33652
Sitecore Experience Platform (XP) v9.3 is affected by an authenticated remote code execution (RCE) vulnerability in the /sitecore/shell/Invoke.aspx component. The CVSS 3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW exploit complexity, LOW privileges required, and no user interaction...
CVE-2023-33652
Sitecore Experience Platform XP v9.3 was discovered to contain an authenticated remote code execution RCE vulnerability via the component /sitecore/shell/Invoke.aspx...
CVE-2022-33652 Azure Site Recovery Elevation of Privilege Vulnerability
...
CVE-2022-33652 Azure Site Recovery Elevation of Privilege Vulnerability
...
CVE-2022-33652
CVE-2022-33652 is an Elevation of Privilege vulnerability in Microsoft Azure Site Recovery (notably the VMware to Azure deployment) that enables attackers to obtain increased entitlements on the vulnerable component. The connected Nessus/NASL entry confirms Azure Site Recovery as affected and ref...
CVE-2021-33652
When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...
CVE-2021-33652
CVE-2021-33652 affects Huawei MindSpore Community (open source deep learning framework). Connected sources describe a vulnerability in the Reduce operator: if axis_sizes contains a value of 0, a division by zero occurs during the Reduce run, leading to a potential crash or denial of service in af...
rConfig cross-site scripting vulnerability (CNVD-2020-33652)
rConfig is an open source network configuration management utility . A cross-site scripting vulnerability exists in the devicemgmnt.php file in version 3.9.4 of rConfig. The vulnerability stems from the lack of proper validation of client-side data in the WEB application, and can be exploited by ...