Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:41 a.m.6 views

CVE-2022-35733

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier allows a remote unauthenticated attacker to execute an arbitrary OS...

9.8CVSS8AI score0.03419EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-35733 Malicious code in test-mlw2-macer-septa-hears-sails (npm)

The package test-mlw2-macer-septa-hears-sails was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/04 10:16 p.m.2 views

CVE-2024-35733

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RLDD Auto Coupons for WooCommerce allows Reflected XSS.This issue affects Auto Coupons for WooCommerce: from n/a through 3.0.14...

7.1CVSS6.9AI score0.00153EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2024/06/19 12:0 a.m.2 views

VulnCheck KEV: CVE-2022-35733

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier allows a remote unauthenticated attacker to execute an arbitrary OS...

9.8CVSS6AI score0.03419EPSS
Exploits0References1
NVD
NVD
added 2024/06/08 1:15 p.m.8 views

CVE-2024-35733

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RLDD Auto Coupons for WooCommerce allows Reflected XSS.This issue affects Auto Coupons for WooCommerce: from n/a through 3.0.14...

7.1CVSS0.00153EPSS
Exploits0References1
CVE
CVE
added 2024/06/08 12:50 p.m.47 views

CVE-2024-35733

CVE-2024-35733 is a Reflected Cross-Site Scripting vulnerability in RLDD Auto Coupons for WooCommerce (Auto Coupons for WooCommerce) that affects versions up to and including 3.0.14. The issue arises from improper input neutralization during web page generation. Public references indicate exploit...

7.1CVSS6.7AI score0.00153EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/08 12:50 p.m.7 views

CVE-2024-35733 WordPress Auto Coupons for WooCommerce plugin <= 3.0.14 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RLDD Auto Coupons for WooCommerce allows Reflected XSS.This issue affects Auto Coupons for WooCommerce: from n/a through 3.0.14...

7.1CVSS7AI score0.00153EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/06/06 12:0 a.m.8 views

WordPress Auto Coupons for WooCommerce Plugin <= 3.0.14 is vulnerable to Cross Site Scripting (XSS)

Software Auto Coupons for WooCommerce Type Plugin Vulnerable versions = 3.0.14 Fixed in 3.0.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35733 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1b70ed246f0c Credits Le Ngoc Anh...

7.1CVSS6.6AI score0.00153EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/03 1:57 a.m.16 views

CVE-2023-35733 D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS7.8AI score0.01855EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:51 a.m.2 views

SUSE CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

7.5CVSS7AI score0.00172EPSS
Exploits0References3
Circl
Circl
added 2022/08/23 7:21 a.m.3 views

CVE-2022-35733

creationtimestamp| type| source ---|---|--- 2022-08-23 07:21:10+00:00| seen| https://t.me/cibsecurity/48570 2024-06-21 18:06:04+00:00| exploited| https://t.me/itsecnews/4508 2026-04-10 09:39:31+00:00| seen| MISP/390462c4-7cd4-4967-94d8-6f5a07d8cfd9...

9.8CVSS7.3AI score0.03419EPSS
Exploits0References2
CVE
CVE
added 2022/08/23 1:35 a.m.69 views

CVE-2022-35733

CVE-2022-35733 affects UNIMO Technology digital video recorders: UDR-JA1004/JA1008/JA1016 firmware v1.0.20.13 and earlier, and UDR-JA1016 v2.0.20.13 and earlier. A remote unauthenticated attacker can execute arbitrary OS commands via a crafted request to the device web interface. Red Hat and JVND...

9.8CVSS9.7AI score0.03419EPSS
Exploits0References2Affected Software1
Rosalinux
Rosalinux
added 2021/07/02 4:39 p.m.34 views

Advisory ROSA-SA-2021-1829

Software: erlang R16B OS: Cobalt 7.9 CVE-ID: CVE-2011-0766 CVE-Crit: MEDIUM CVE-DESC: The random number generator in the Crypto application before 2.0.2.2.2 and SSH before 2.0.5, which was used in the Erlang / OTP ssh library before R14B03, uses predictable starting numbers based on the current...

7.8CVSS7.2AI score0.03371EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2021/01/29 12:0 a.m.23 views

Fedora 33 : erlang (2021-06cbd73fba)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-06cbd73fba advisory. - An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root...

7.5CVSS7.3AI score0.00172EPSS
Exploits0References2
Circl
Circl
added 2021/01/15 4:55 p.m.2 views

CVE-2020-35733

creationtimestamp| type| source ---|---|--- 2021-01-15 16:55:53+00:00| seen| https://t.me/cibsecurity/22206...

7.5CVSS7.3AI score0.00172EPSS
Exploits0References1
NVD
NVD
added 2021/01/15 2:15 p.m.19 views

CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

7.5CVSS7.4AI score0.00172EPSS
Exploits0References5
CVE
CVE
added 2021/01/15 1:35 p.m.101 views

CVE-2020-35733

CVE-2020-35733 affects Erlang/OTP prior to 23.2.2. The issue is in the ssl application where an invalid X.509 certificate chain can be accepted and trusted to a root CA, enabling certificate verification bypass in TLS connections. Multiple vendor advisories reference the same root cause and advis...

7.5CVSS7.2AI score0.00172EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder