1331
|
5.3 |
MEDIUM
Network
phoenixcontact
|
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua…
|
An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing a high number of TCP connections to the pathfinder TCP encapsulation service. T…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2024-7734
|
2024-09-29 08:56 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
1332
|
8.8 |
HIGH
Network
|
qnap
|
music_station
|
An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network.
We have …
|
CWE-287
Improper Authentication
|
CVE-2023-45038
|
2024-09-29 08:51 |
2024-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1333
|
8.8 |
HIGH
Network
|
qnap
|
video_station
|
An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network.
We have already fi…
|
CWE-78 CWE-77
OS Command Command Injection
|
CVE-2023-47563
|
2024-09-29 08:47 |
2024-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1334
|
8.8 |
HIGH
Network
|
qnap
|
video_station
|
A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.
We have already fixed…
|
CWE-89
SQL Injection
|
CVE-2023-50360
|
2024-09-29 08:44 |
2024-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1335
|
- |
|
-
|
-
|
SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see …
|
CWE-524 CWE-922
Use of Cache Containing Sensitive Information Insecure Storage of Sensitive Information
|
CVE-2024-33004
|
2024-09-29 08:15 |
2024-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1336
|
- |
|
-
|
-
|
The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads t…
|
CWE-605
Multiple Binds to the Same Port
|
CVE-2024-30218
|
2024-09-29 08:15 |
2024-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1337
|
- |
|
-
|
-
|
Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitat…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2024-25646
|
2024-09-29 08:15 |
2024-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1338
|
- |
|
-
|
-
|
Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact…
|
-
|
CVE-2024-28163
|
2024-09-29 08:15 |
2024-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1339
|
- |
|
-
|
-
|
Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the appl…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2024-25645
|
2024-09-29 08:15 |
2024-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1340
|
- |
|
-
|
-
|
Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integ…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2024-25644
|
2024-09-29 08:15 |
2024-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|