51 matches found
CVE-2016-3946
SAP Console aka SAPConsole 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461...
Code injection
SAP Console aka SAPConsole 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461...
CVE-2016-3946
SAP Console (aka SAPConsole) 7.30 is affected by an information disclosure vulnerability where local users can read the Windows registry to obtain SAP Server login credentials. Root cause: insecure handling/storage of credentials in the Windows registry as described in SAP Security Note 2121461. ...
CVE-2013-7094
SQL injection vulnerability in the RSDDCVERCOUNTTABCOLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-7094
CVE-2013-7094 : A SQL injection vulnerability exists in the RSDDCVER_COUNT_TAB_COLS function of SAP NetWeaver 7.30. Remote attackers can potentially execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the affected product/version and vulnerable component; no ex...
CVE-2013-7094
SQL injection vulnerability in the RSDDCVERCOUNTTABCOLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the server parameter...
SAP NetWeaver BAPI - SMB Relay vulnerability
Application: SAP NetWeaver ABAP Versions Affected: 7.30 Basis 720 SP 0, Kernel 720 patch 68 Vendor URL: http://www.sap.com Bugs: SMB Relay Exploits: YES Reported: 11.12.2012 Vendor response: 12.12.2012 Date of SAP Security Note Published: 12.02.2013 Date of Public Advisory: 20.02.2013 Reference:...
CVE-2009-3637
Stack-based buffer overflow in the MAddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command...
CVE-2009-3637
The CVE-2009-3637 issue affects Alien Arena (Red Planet Arena Alien Arena) 7.30, where a stack-based buffer overflow occurs in M_AddToServerList (client/menu.c). An attacker can cause remote code execution by sending a crafted server description to UDP port 27901, followed by a long print command...
Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30
Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30 ------------------------------------------------------------- October 21st, 2009 ======= Summary ======= Name: Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30 Release Date: October 21st, 2009 Discoverer: Jason Geffner...