CVE Vulnerability Catalog

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, there is a command injection vulnerability. A remote attacker with low privileges may exploit this flaw in an HTTP POST request related to font configuration to gain full access to the device.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request related to date/time operations to gain full access to the device.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote attacker with low privileges may use a specific HTTP POST related to certificate operations to gain full access to the device.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device.

In PHOENIX CONTACT's TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 and CLOUD CLIENT 1101T-TX/TX prior to 2.06.10, an authenticated remote attacker with admin privileges could upload a crafted XML file, leading to a denial-of-service.

In PHOENIX CONTACT's TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10, there is a vulnerability to reflective XSS in the license viewer page. An unauthenticated remote attacker could exploit this vulnerability to execute code in the context of the user's browser.

ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.

The log_blackbox.c file in libqb before version 2.0.8 has a buffer overflow vulnerability due to long log messages, as the header size is not considered.

In SAP BusinessObjects Business Intelligence version 420, if a user logs into a specific program, under certain specific conditions memory may not be cleared properly, which could allow an attacker to access user credentials.

SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.

SAP Business One version 10.0 allows an attacker to inject malicious code into the content of a web page or application, leading to Cross-site scripting.

In SAP Supplier Relationship Management versions 600, 602, 603, 604, 605, 606, 616, 617, there is a vulnerability that allows an unauthorized attacker to discover information related to SRM within Vendor Master Data. This information could be used to tailor attacks against SRM.

SAP NetWeaver Application Server ABAP and ABAP Platform in versions from 700 to 804 do not perform necessary authorization checks for an authenticated user, resulting in privilege escalation. This could allow an attacker to access sensitive information that can be used in a subsequent serious attack.

The Access Control List (ACL) of the SAP Message Server in certain versions can be bypassed, allowing an authenticated malicious user to access the network of SAP systems. This may lead to unauthorized read and write of data as well as system unavailability.

SAP Business Objects Installer in versions 420 and 430 allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. By replacing this executable with a malicious file, an attacker can completely compromise the confidentiality, integrity, and availability of the system.

In SAP NetWeaver Process Integration versions SAP_XIESR 7.50, SAP_XITOOL 7.50, SAP_XIAF 7.50, insufficiently encoded user-controlled inputs may lead to a Cross-Site Scripting (XSS) attack. Successful exploitation could impact the confidentiality and integrity of the system.

SAP Business One (Service Layer) version 10.0 allows an authenticated attacker with deep knowledge to perform certain operations to access unintended data over the network.

Under certain conditions, SAP Commerce API (OCC) in versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211 allows an attacker to access information that would otherwise be restricted. Successful exploitation could lead to a high impact on confidentiality.

SAP PowerDesigner version 16.7 queries all password hashes in the backend database and compares them with the user-provided one during login attempts. This may allow an attacker to access password hashes from the client's memory.

SAP PowerDesigner version 16.7 has improper access control which might allow an unauthenticated attacker to run arbitrary queries against the back-end database via Proxy.