13 matches found
CVE-2026-33966
creationtimestamp| type| source ---|---|--- 2026-06-02 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260603...
Linux Distros Unpatched Vulnerability : CVE-2021-33966
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross site scripting XSS vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page...
CVE-2021-33966
Cross site scripting XSS vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page...
CVE-2024-33966
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'xtsearch' in...
CVE-2024-33966
creationtimestamp| type| source ---|---|--- 2024-08-06 15:00:43+00:00| seen| https://t.me/cvedetector/2561...
CVE-2023-33966
Deno 1.34.0 and deno_runtime 0.114.0 allow outbound HTTP requests via built-in node:http/node:https without checking the network allow-list. This affects dependencies using these modules. The issue is patched in Deno v1.34.1 and deno_runtime 0.114.1; update all affected installations. Deno Deploy...
CVE-2023-33966 Deno missing "--allow-net" permission check for built-in Node modules
Deno is a runtime for JavaScript and TypeScript. In deno 1.34.0 and denoruntime 0.114.0, outbound HTTP requests made using the built-in node:http or node:https modules are incorrectly not checked against the network permission allow list --allow-net. Dependencies relying on these built-in modules...
CVE-2021-33966
creationtimestamp| type| source ---|---|--- 2022-01-21 22:13:38+00:00| seen| https://t.me/cibsecurity/36048...
CVE-2021-33966
Cross site scripting XSS vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page...
CVE-2021-33966
Cross site scripting XSS vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page...
CVE-2021-33966
Removed by vendor...
CVE-2021-33966
Spotweb 1.4.9 contains a Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to execute arbitrary code via a crafted GET request to the login page. The issue is documented across multiple feeds (NVD entry CVE-2021-33966 and related sources) with a confirmed XSS vector on ...
CVE-2022-33966
...