CVE Vulnerability Catalog

In MongoDB Ops Manager v5.0 prior to 5.0.22 and v6.0 prior to 6.0.17, an authenticated user with project owner or project user admin access can generate an API key with the privileges of org owner, resulting in privilege escalation.

CVE-2023-3898 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities in mAyaNet E-Commerce Software versions before 1.1.

CVE-2023-37570 vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. A remote attacker could gain unauthorized access to the targeted system by reusing the stolen cookie.

CVE-2023-37569 exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, there is a command injection vulnerability. A remote attacker with low privileges may exploit this flaw in an HTTP POST request related to font configuration to gain full access to the device.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request related to date/time operations to gain full access to the device.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote attacker with low privileges may use a specific HTTP POST related to certificate operations to gain full access to the device.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device.

In PHOENIX CONTACT's TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 and CLOUD CLIENT 1101T-TX/TX prior to 2.06.10, an authenticated remote attacker with admin privileges could upload a crafted XML file, leading to a denial-of-service.

In PHOENIX CONTACT's TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10, there is a vulnerability to reflective XSS in the license viewer page. An unauthenticated remote attacker could exploit this vulnerability to execute code in the context of the user's browser.

ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.

The log_blackbox.c file in libqb before version 2.0.8 has a buffer overflow vulnerability due to long log messages, as the header size is not considered.

In SAP BusinessObjects Business Intelligence version 420, if a user logs into a specific program, under certain specific conditions memory may not be cleared properly, which could allow an attacker to access user credentials.

SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.

SAP Business One version 10.0 allows an attacker to inject malicious code into the content of a web page or application, leading to Cross-site scripting.

In SAP Supplier Relationship Management versions 600, 602, 603, 604, 605, 606, 616, 617, there is a vulnerability that allows an unauthorized attacker to discover information related to SRM within Vendor Master Data. This information could be used to tailor attacks against SRM.

SAP NetWeaver Application Server ABAP and ABAP Platform in versions from 700 to 804 do not perform necessary authorization checks for an authenticated user, resulting in privilege escalation. This could allow an attacker to access sensitive information that can be used in a subsequent serious attack.

The Access Control List (ACL) of the SAP Message Server in certain versions can be bypassed, allowing an authenticated malicious user to access the network of SAP systems. This may lead to unauthorized read and write of data as well as system unavailability.

SAP Business Objects Installer in versions 420 and 430 allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. By replacing this executable with a malicious file, an attacker can completely compromise the confidentiality, integrity, and availability of the system.

In SAP NetWeaver Process Integration versions SAP_XIESR 7.50, SAP_XITOOL 7.50, SAP_XIAF 7.50, insufficiently encoded user-controlled inputs may lead to a Cross-Site Scripting (XSS) attack. Successful exploitation could impact the confidentiality and integrity of the system.