CVE-2026-35048

creationtimestamp| type| source ---|---|--- 2026-07-20 17:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3txiwaon2e...

CVE-2022-35048

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c...

Linux Distros Unpatched Vulnerability : CVE-2022-35048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c. CVE-2022-35048 Note that Nessus relies on the presenc...

MAL-2025-35048 Malicious code in test-mlw2-cella-desex (npm)

The package test-mlw2-cella-desex was found to contain malicious code...

CVE-2023-35048

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in MagePeople Team Booking and Rental Manager for Bike plugin = 1.2.1 versions...

CVE-2023-35048

creationtimestamp| type| source ---|---|--- 2023-06-23 16:46:51+00:00| seen| https://t.me/cibsecurity/65459...

CVE-2023-35048 WordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in MagePeople Team Booking and Rental Manager for Bike plugin = 1.2.1 versions...

CVE-2023-35048

CVE-2023-35048 affects the WordPress plugin “Booking and Rental Manager for Bike” (also listed as MagePeople Booking and Rental Manager for Woo/Car/etc.) at versions ≤ 1.2.1. The root cause is improper input sanitization/escaping of plugin settings, enabling an authenticated (admin+) Stored Cross...

WordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Booking and Rental Manager Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-35048 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 73d697a7ce84 Credits NeginNrb...

CVE-2022-35048

creationtimestamp| type| source ---|---|--- 2022-10-14 16:28:59+00:00| seen| https://t.me/cibsecurity/51410...

CVE-2022-35048

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2022-35048

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2022-35048

CVE-2022-35048 concerns the OpenType font toolkit OTFCC. The issue is a heap buffer overflow in the release-path handler /release-x64/otfccdump+0x6b0b2c within OTFCC commit 617837b. Public descriptions consistently state a boundary/heap overflow when processing untrusted input, which can cause a ...

CVE-2022-35048

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2021-35048 Unauthenticated SQL Injection Vulnerability in Fidelis Network and Deception

Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to exposure of authentication tokens in some versions of Fidelis software. The vulnerability is present in Fidelis Network and Deception version...

CVE-2021-35048

CVE-2021-35048 affects Fidelis Network and Deception CommandPost, allowing unauthenticated SQL injection via the web interface. Affected: Fidelis Network and Deception versions prior to 9.3.7 and version 9.4. The flaw can lead to exposure of authentication tokens. Patches/updates exist to address...