17 matches found
MAL-2025-35783 Malicious code in test-mlw2-mimsy-fours (npm)
The package test-mlw2-mimsy-fours was found to contain malicious code...
CVE-2023-35783
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
CVE-2024-35783
creationtimestamp| type| source ---|---|--- 2024-09-10 13:24:06+00:00| seen| https://t.me/cvedetector/5221 2024-09-14 02:49:30+00:00| published-proof-of-concept| https://t.me/HackingInsights/12987 2024-09-15 19:45:50+00:00| published-proof-of-concept| https://t.me/icscert/912 2025-11-05...
CVE-2024-35783
A vulnerability has been identified in SIMATIC BATCH V9.1 All versions, SIMATIC Information Server 2020 All versions V2020 SP2 Update 5, SIMATIC Information Server 2022 All versions V2022 SP1 Update 2, SIMATIC PCS 7 V9.1 All versions V9.1 SP2 UC06, SIMATIC Process Historian 2020 All versions V202...
CVE-2024-35783
A vulnerability has been identified in SIMATIC BATCH V9.1 All versions, SIMATIC Information Server 2020 All versions V2020 SP2 Update 5, SIMATIC Information Server 2022 All versions V2022 SP1 Update 2, SIMATIC PCS 7 V9.1 All versions V9.1 SP2 UC06, SIMATIC Process Historian 2020 All versions V202...
Siemens SIMATIC SCADA and PCS 7 Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2023-35783
creationtimestamp| type| source ---|---|--- 2023-06-16 18:23:34+00:00| seen| https://t.me/cibsecurity/65304...
CVE-2023-35783
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
CVE-2023-35783
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
CVE-2023-35783
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
CVE-2023-35783
The CVE-2023-35783 vulnerability concerns the TYPO3 ke_search (Faceted Search) extension. Multiple connected sources confirm an XSS flaw via indexed data in ke_search versions prior to 4.0.3; 4.1.x through 4.6.x prior to 4.6.6; and 5.x prior to 5.0.2. Impact is cross-site scripting via the extens...
CVE-2022-35783 Azure Site Recovery Elevation of Privilege Vulnerability
...
CVE-2022-35783
The connected documents confirm CVE-2022-35783 targets Microsoft Azure Site Recovery, specifically the VMware-to-Azure component. The root cause is insufficient access control, enabling a remote attacker to gain unauthorized access to protected information (information disclosure). Microsoft’s ad...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-35783. Reason: This candidate is a reservation duplicate of CVE-2020-35783. Notes: All CVE users should reference CVE-2020-35783 instead of this candidate. All references and descriptions in this candidate have been removed t...
CVE-2020-35222
CVE-2020-35222 is a reservation duplicate of CVE-2020-35783. The active issue affects NETGEAR JGS516PE/GS116Ev2/JGS524Ev2/JGS524PE before 2.6.0.48, where the NSDP protocol allows unauthenticated remote reads to obtain all switch configuration parameters. Remediation is to upgrade to version 2.6.0...
CVE-2020-35783
creationtimestamp| type| source ---|---|--- 2020-12-30 02:30:10+00:00| seen| https://t.me/cibsecurity/21407...
CVE-2020-35783
CVE-2020-35783 affects Netgear ProSafe/Smart+ switches JGS516PE, GS116Ev2, JGS524Ev2, and JGS524PE (pre-2.6.0.48). A lack of function-level access control and NSDP protocol behavior allow unauthenticated remote attackers to read all switch configuration parameters via read requests. Affected vers...