CVE Vulnerability Catalog

Zidentyfikowano podatność w urządzeniu SIMATIC CN 4100 (wszystkie wersje < V2.5) z powodu nieprawidłowej wartości domyślnej w konfiguracji SSH. Może to umożliwić atakującemu ominięcie izolacji sieciowej.

SAP Solution Manager (Diagnostics agent) version 7.20 allows an unauthenticated attacker to blindly execute HTTP requests. Upon successful exploitation, the attacker can impact the confidentiality and availability of the application and other applications the Diagnostics Agent can reach.

SAP Solution Manager (Diagnostics agent) version 7.20 allows an attacker to tamper with headers in a client request, misleading the SAP Diagnostics Agent into serving poisoned content to the server. Successful exploitation can lead to a limited impact on confidentiality and availability of the application.

SAP Web Dispatcher and related components have a vulnerability that can be exploited by an unauthenticated attacker to cause memory corruption through logical errors in memory management. This may lead to information disclosure or system crashes.

SAP SQL Anywhere version 17.0 allows an attacker to block legitimate users from accessing the service by crashing it. An attacker with low privileges and access to the local system can write into shared memory objects.

An attacker with non-administrative authorizations in SAP NetWeaver (BI CONT ADD ON) - versions 707, 737, 747, 757 can exploit a directory traversal flaw to overwrite system files. While data from confidential files cannot be read, there is a risk of overwriting some OS files, potentially leading to system compromise.

An unauthenticated attacker in SAP Web Dispatcher can submit a maliciously crafted request to a front-end server, which may lead to the back-end server confusing the boundaries between malicious and legitimate messages. This can result in the back-end server executing a malicious payload, potentially allowing unauthorized access to or modification of information on the server or causing temporary unavailability.

Wtyczka 'Buy Me a Coffee – Button and Widget Plugin' dla WordPressa jest podatna na atak typu Cross-Site Request Forgery z powodu braku walidacji nonce w funkcjach recieve_post, bmc_disconnect, name_post oraz widget_post w wersjach do 3.7 włącznie. Atakujący bez uwierzytelnienia może zaktualizować ustawienia wtyczki, jeśli uda mu się nakłonić administratora strony do wykonania określonej akcji, na przykład kliknięcia w link.

Wtyczka 'Buy Me a Coffee – Button and Widget Plugin' dla WordPressa jest podatna na nieautoryzowaną modyfikację danych z powodu braku odpowiednich kontroli uprawnień w funkcjach recieve_post, bmc_disconnect, name_post i widget_post w wersjach do 3.7 włącznie. Umożliwia to uwierzytelnionym atakującym, posiadającym minimalne uprawnienia, takie jak subskrybenci, aktualizację ustawień wtyczki.

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function. This flaw can lead to denial of service, code execution, or information disclosure.

A heap buffer overflow vulnerability was found in sox, in the startread function. This flaw can lead to denial of service, code execution, or information disclosure.

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing settings such as the IP address due to missing access control.

CVE-2023-3272 vulnerability involves the transmission of sensitive information in cleartext in the SICK ICR890-4 device. A remote attacker could intercept network traffic, allowing access to confidential data.

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing unauthenticated endpoints.

The vulnerability in SICK ICR890-4 allows an unauthorized remote attacker to access sensitive information about the system.

Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the device via HTTP requests.

In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is an exposure of sensitive information to unauthorized actors.

There is a code injection vulnerability in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10.

Piwigo, an open-source photo gallery software, prior to version 13.8.0, has a SQL Injection vulnerability in the administrator login screen. An attacker with access to this screen can execute arbitrary SQL statements, potentially leading to information leakage from the database.

Versions TravianZ 8.3.4 and 8.3.3 contain a PHP injection vulnerability in the config editor on the admin page, allowing remote attackers to execute PHP code.