15 matches found
DEBIAN-CVE-2026-46633
Bulletin has no description...
CVE-2026-46633
Unknown description...
CVE-2026-46633
creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:57+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp77j3sk2h 2026-06-06 23:55:29+00:00| seen| https://gist.github.com/vladko312/39507beaa58eacf3b62e6a6e6cd69128...
CVE-2023-46633
Missing Authorization vulnerability in TCBarrett Glossary allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Glossary: from n/a through 3.1.2...
CVE-2021-46633
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2025-46633
Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in respons...
CVE-2025-46633
creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cppd7hh2h 2025-05-01 23:12:31+00:00| seen| https://t.me/cvedetector/24265 2025-05-02 15:16:59+00:00| published-proof-of-concept|...
CVE-2025-46633
Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in respons...
CVE-2025-46633
Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in respons...
CVE-2025-46633
CVE-2025-46633 affects the Tenda RX2 Pro web management portal (version 16.03.30.14). The root cause is the cleartext transmission of the symmetric AES key in responses after successful authentication, with a fixed IV (EU5H62G9ICGRNI43). This enables an attacker with network access to decrypt tra...
CVE-2023-46633
creationtimestamp| type| source ---|---|--- 2025-01-02 12:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2m7efhz2o 2025-01-02 14:38:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113759269086557005...
CVE-2023-46633
CVE-2023-46633: WordPress WP Glossary plugin
WordPress Glossary Plugin <= 3.1.2 is vulnerable to Broken Access Control
Software Glossary Type Plugin Vulnerable versions = 3.1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46633 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 27c2b348236a Credits Nguyen Xuan Chien Required privilege...
CVE-2021-46633
creationtimestamp| type| source ---|---|--- 2022-02-18 22:41:00+00:00| seen| https://t.me/cibsecurity/37760...
CVE-2021-46633
CVE-2021-46633 affects Bentley MicroStation CONNECT 10.16.0.80. The root cause is improper validation of an object before operations during PDF parsing, enabling an attacker to execute arbitrary code in the current process. Requires user interaction (visiting a malicious page or opening a crafted...