Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:2 a.m.5 views

CVE-2023-33652

Sitecore Experience Platform XP v9.3 was discovered to contain an authenticated remote code execution RCE vulnerability via the component /sitecore/shell/Invoke.aspx...

8.8CVSS8.2AI score0.03662EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:48 p.m.3 views

CVE-2021-33652

When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...

7.5CVSS6.9AI score0.00433EPSS
Exploits0References1
Circl
Circl
added 2025/01/08 3:14 p.m.3 views

CVE-2023-33652

creationtimestamp| type| source ---|---|--- 2025-01-08 15:14:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/704...

8.8CVSS8.1AI score0.03662EPSS
Exploits1References1
Patchstack
Patchstack
added 2024/04/25 12:0 a.m.19 views

WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Broken Access Control

Software Client Dash Type Plugin Vulnerable versions = 2.2.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33652 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 999732255bed Credits Skalucy Required privilege...

5.3CVSS6.6AI score0.00182EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/06/06 12:0 a.m.42 views

CVE-2023-33652

Sitecore Experience Platform (XP) v9.3 is affected by an authenticated remote code execution (RCE) vulnerability in the /sitecore/shell/Invoke.aspx component. The CVSS 3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW exploit complexity, LOW privileges required, and no user interaction...

8.8CVSS9AI score0.03662EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/06 12:0 a.m.8 views

CVE-2023-33652

Sitecore Experience Platform XP v9.3 was discovered to contain an authenticated remote code execution RCE vulnerability via the component /sitecore/shell/Invoke.aspx...

8.2AI score0.03662EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/07/12 10:38 p.m.23 views

CVE-2022-33652 Azure Site Recovery Elevation of Privilege Vulnerability

...

4.9CVSS6.3AI score0.19569EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/07/12 10:38 p.m.21 views

CVE-2022-33652 Azure Site Recovery Elevation of Privilege Vulnerability

...

4.9CVSS6.8AI score0.19569EPSS
Exploits0References1
CVE
CVE
added 2022/07/12 10:38 p.m.205 views

CVE-2022-33652

CVE-2022-33652 is an Elevation of Privilege vulnerability in Microsoft Azure Site Recovery (notably the VMware to Azure deployment) that enables attackers to obtain increased entitlements on the vulnerable component. The connected Nessus/NASL entry confirms Azure Site Recovery as affected and ref...

4.9CVSS5.9AI score0.19569EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2022/06/27 5:15 p.m.9 views

CVE-2021-33652

When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...

7.5CVSS0.00433EPSS
Exploits0References1
CVE
CVE
added 2022/06/27 4:21 p.m.55 views

CVE-2021-33652

CVE-2021-33652 affects Huawei MindSpore Community (open source deep learning framework). Connected sources describe a vulnerability in the Reduce operator: if axis_sizes contains a value of 0, a division by zero occurs during the Reduce run, leading to a potential crash or denial of service in af...

7.5CVSS7.5AI score0.00433EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2020/05/19 12:0 a.m.2 views

rConfig cross-site scripting vulnerability (CNVD-2020-33652)

rConfig is an open source network configuration management utility . A cross-site scripting vulnerability exists in the devicemgmnt.php file in version 3.9.4 of rConfig. The vulnerability stems from the lack of proper validation of client-side data in the WEB application, and can be exploited by ...

5.4CVSS6.4AI score0.68306EPSS
Exploits0References1
Rows per page
Query Builder