17 matches found
CVE-2022-35733
Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier allows a remote unauthenticated attacker to execute an arbitrary OS...
MAL-2025-35733 Malicious code in test-mlw2-macer-septa-hears-sails (npm)
The package test-mlw2-macer-septa-hears-sails was found to contain malicious code...
CVE-2024-35733
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RLDD Auto Coupons for WooCommerce allows Reflected XSS.This issue affects Auto Coupons for WooCommerce: from n/a through 3.0.14...
VulnCheck KEV: CVE-2022-35733
Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier allows a remote unauthenticated attacker to execute an arbitrary OS...
CVE-2024-35733
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RLDD Auto Coupons for WooCommerce allows Reflected XSS.This issue affects Auto Coupons for WooCommerce: from n/a through 3.0.14...
CVE-2024-35733
CVE-2024-35733 is a Reflected Cross-Site Scripting vulnerability in RLDD Auto Coupons for WooCommerce (Auto Coupons for WooCommerce) that affects versions up to and including 3.0.14. The issue arises from improper input neutralization during web page generation. Public references indicate exploit...
CVE-2024-35733 WordPress Auto Coupons for WooCommerce plugin <= 3.0.14 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RLDD Auto Coupons for WooCommerce allows Reflected XSS.This issue affects Auto Coupons for WooCommerce: from n/a through 3.0.14...
WordPress Auto Coupons for WooCommerce Plugin <= 3.0.14 is vulnerable to Cross Site Scripting (XSS)
Software Auto Coupons for WooCommerce Type Plugin Vulnerable versions = 3.0.14 Fixed in 3.0.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35733 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1b70ed246f0c Credits Le Ngoc Anh...
CVE-2023-35733 D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...
SUSE CVE-2020-35733
An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...
CVE-2022-35733
creationtimestamp| type| source ---|---|--- 2022-08-23 07:21:10+00:00| seen| https://t.me/cibsecurity/48570 2024-06-21 18:06:04+00:00| exploited| https://t.me/itsecnews/4508 2026-04-10 09:39:31+00:00| seen| MISP/390462c4-7cd4-4967-94d8-6f5a07d8cfd9...
CVE-2022-35733
CVE-2022-35733 affects UNIMO Technology digital video recorders: UDR-JA1004/JA1008/JA1016 firmware v1.0.20.13 and earlier, and UDR-JA1016 v2.0.20.13 and earlier. A remote unauthenticated attacker can execute arbitrary OS commands via a crafted request to the device web interface. Red Hat and JVND...
Advisory ROSA-SA-2021-1829
Software: erlang R16B OS: Cobalt 7.9 CVE-ID: CVE-2011-0766 CVE-Crit: MEDIUM CVE-DESC: The random number generator in the Crypto application before 2.0.2.2.2 and SSH before 2.0.5, which was used in the Erlang / OTP ssh library before R14B03, uses predictable starting numbers based on the current...
Fedora 33 : erlang (2021-06cbd73fba)
The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-06cbd73fba advisory. - An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root...
CVE-2020-35733
creationtimestamp| type| source ---|---|--- 2021-01-15 16:55:53+00:00| seen| https://t.me/cibsecurity/22206...
CVE-2020-35733
An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...
CVE-2020-35733
CVE-2020-35733 affects Erlang/OTP prior to 23.2.2. The issue is in the ssl application where an invalid X.509 certificate chain can be accepted and trusted to a root CA, enabling certificate verification bypass in TLS connections. Multiple vendor advisories reference the same root cause and advis...