CVE-2023-26459 Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the application server to send a request to ...

PT-2023-21400 · Sap · Abap +1

Name of the Vulnerable Software and Affected Versions: SAP Solution Manager and ABAP managed systems ST-PI versions 2088 1 700, 2008 1 710, 740 Description: An attacker authenticated as a user with a non-administrative role and a common remote execution authorization can use a vulnerable interfac...

SAP NetWeaver Application Server 资源管理错误漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A resource management error vulnerability exists in SAP NetWeaver Application Server, which stems from the presence of an error handling class, and can be exploited by an attacker to consume the server's resources to mak...

Siemens SCALANCE Third-Party

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2023-15953 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver versions 700 through 750 Description: The issue is caused by insufficient encoding of user input, allowing an unauthenticated attacker to inject code. This can expose sensitive data, such as user id and password, and may lead to...

K08441753: Multiple Intel Ethernet 700 Series Controllers vulnerabilities

Security Advisory Description CVE-2019-0139 Insufficient access control in firmware for IntelR Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access...

K28563873: Intel Ethernet 700 Series Controllers vulnerabilities CVE-2020-8690, CVE-2020-8691, CVE-2020-8692, and CVE-2020-8693

Security Advisory Description CVE-2020-8690 Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access. CVE-2020-8691 A logic issue in the firmware of...

CVE-2022-36382

Out-of-bounds write in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some IntelR Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access...

Founder of Bitzlato Exchange Arrested for ransomware, $700 mln Fraud

By Habiba Rashid Anatoly Legkodymov, a Russian national and the owner of Bitzlato Ltd., was arrested in Miami Tuesday night. This is a post from HackRead.com Read the original post: Founder of Bitzlato Exchange Arrested for ransomware, $700 mln Fraud...

HPESBGN04364 rev.1 - HPE Intel 500 and 700 Series Ethernet Controllers, INTEL-SA-00650, Intel Ethernet VMware Drivers Advisory, Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 10Gb 2-port FLR-SFP+ X710-DA2 Adapter - Prior to Gen10 Service Pack for ProLiant 2022.09.0 - Intel Ethernet 700 Series Controller HPE Ethernet 10Gb 2-port SFP+...

CVE-2022-21793

Insufficient control flow management in the IntelR Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the IntelR Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via loc...

CVE-2021-33126

Improper access control in the firmware for some IntelR 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-21793

CVE-2022-21793 is a vulnerability in Intel® Ethernet VMware drivers. The issue is caused by insufficient control flow management in the Intel® Ethernet 500 Series Controller drivers for VMware before version 1.11.4.0 and in the Intel® Ethernet 700 Series Controller drivers for VMware before versi...

PT-2022-15134 · Vmware +1 · Vmware +2

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 500 Series Controller drivers for VMWare versions prior to 1.11.4.0 IntelR Ethernet 700 Series Controller drivers for VMWare versions prior to 2.1.5.0 Description: The issue is related to insufficient control flow management i...

PT-2022-4147 · Siemens · Scalance W-700 +9

Name of the Vulnerable Software and Affected Versions: SCALANCE M-800 / S615 versions prior to V2.3.1 SCALANCE SC-600 family versions prior to V2.3.1 SCALANCE W-1700 IEEE 802.11ac family versions prior to V2.3.1 SCALANCE W-700 IEEE 802.11ax family versions prior to V2.3.1 SCALANCE W-700 IEEE...

Intel® Ethernet VMware Drivers Advisory

Summary: A potential security vulnerability in some Intel® Ethernet VMWare drivers may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21793 Description: Insufficient control flow management in the Intel...

Siemens SCALANCE

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

old.700-let.ru Open Redirect vulnerability OBB-2733556

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware

CVE-2022-30525 Zyxel Firewall Command Injection Vulnerability...

PT-2022-17672 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP versions 700, 701, 702, 731 Description: The issue is due to a missing authorization check, allowing an authenticated attacker to access content on the start screen of any transaction within the same...