Archive
10 March 2020
Vulnerabilities first published on this day (UTC), newest first.
144 results · Feed
-
Unscored —
A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1.…
-
Unscored —
A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.…
-
Unscored —
An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication…
-
Unscored —
An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versio…
-
Critical 9.8
Improper Neutralization of Special Elements used in an OS Command in Blamer
Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer.
-
Unscored —
An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 0…
-
Unscored —
An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware v…
-
Unscored —
An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKP…
-
Unscored —
An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT au…
-
Unscored —
An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Fir…
-
Unscored —
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 …
-
Unscored —
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 …
-
Unscored —
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC…
-
Unscored —
An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management …
-
Unscored —
The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs …
-
Unscored —
An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can…
-
Unscored —
C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the paylo…
-
Unscored —
Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payl…
-
Unscored —
Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to th…
-
Medium 4.7
SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the at…
-
High 7.2
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, all…
-
High 7.5
SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basi…
-
Critical 10.0
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform a…
KEV Nov 3, 2021 -
Medium 4.7
SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning m…
-
Medium 6.1
SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02, 7.10, 7.11, 7.30, 7.31…
-
Medium 4.3
The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 60…
-
Critical 9.1
SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker t…
-
Medium 5.5
SAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; doe…
-
Medium 6.1
The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlle…
-
Medium 5.4
The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client-side angularjs template…
-
Medium 5.4
The view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN versions- 618, 730 and…
-
Critical 9.8
SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. Thi…
-
Low 3.8
SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Ex…
-
High 7.5
SAP BusinessObjects Mobile (MobileBIService), version 4.2, allows an attacker to generate multiple requests, using whic…
-
Medium 5.4
SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser hi…
-
Unscored —
In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This co…
-
Unscored —
In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —
In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds c…
-
Unscored —
In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due t…
-
Unscored —
In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_…