Lucene search
+L

15 matches found

OSV
OSV
•added 2026/10/02 7:07 p.m.•12 views

CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

8.3CVSS6.1AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/02 7:07 p.m.•41 views

CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

8.3CVSS0.00331EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/15 4:44 p.m.•16 views

EUVD-2026-78927

Coder allows organizations to provision remote development environments via Terraform. Prior to 2.29.19, 2.32.9, 2.33.10, and 2.34.4, agentConn.apiClient follows redirects while its custom transport accepts the host from the redirected request URL when the port is the workspace agent HTTP API por...

8.3CVSS5.9AI score0.00762EPSS
SaveExploits0References15
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-30278

Malicious code in bioql PyPI...

8.7CVSS7.2AI score0.00555EPSS
SaveExploits0References2
NVD
NVD
•added 2023/04/11 3:15 a.m.•39 views

CVE-2023-26458

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

8.7CVSS6.9AI score0.00555EPSS
SaveExploits0References2
Prion
Prion
•added 2023/04/11 3:15 a.m.•35 views

Information disclosure

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

4.7CVSS8AI score0.00555EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/04/11 2:34 a.m.•62 views

CVE-2023-26458

The CVE affects SAP Landscape Management (enterprise edition) 3.0. An authenticated SAP Landscape Management user can access the Diagnostics Agent connection via Java SCS Message Server on a Solution Manager system and escalate to obtain privileged access on other systems, leading to information ...

8.7CVSS7.3AI score0.00555EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/04/11 2:34 a.m.•53 views

CVE-2023-26458 Information Disclosure vulnerability in SAP Landscape Management

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

6.8CVSS8.3AI score0.00555EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•4 views

CVE-2023-26458: Exposure of Resource to Wrong Sphere

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

8.7CVSS5.9AI score0.00555EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 4:48 a.m.•8 views

SUSE CVE-2017-6542

The sshagentchanneldata function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overfl...

9.8CVSS7.6AI score0.21816EPSS
SaveExploits4References3
CNVD
CNVD
•added 2020/11/11 12:00 a.m.•17 views

SAP Solution Manager Missing Authentication Check Vulnerability (CNVD-2020-62929)

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

10CVSS6.9AI score0.013EPSS
SaveExploits0References1
NVD
NVD
•added 2020/11/10 5:15 p.m.•34 views

CVE-2020-26823

SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service...

10CVSS9.6AI score0.013EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/10 12:00 a.m.•5 views

CVE-2020-26823: Missing Authentication for Critical Function

SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service...

10CVSS8.1AI score0.013EPSS
SaveExploits0References2
Citrix
Citrix
•added 2017/10/06 12:00 a.m.•35 views

WEM agent is not able to connect/synchronize with the WEM Broker Server

ISSUE: WEM Agent is not able to connect and synchronize with the WEM Broker servers ERRORS PRESENT: The WEM Agent session & Debug logs show the following error: Exception - AgentLocalCacheSync. : The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communicati...

7AI score
SaveExploits0
Citrix
Citrix
•added 2016/11/18 12:00 a.m.•20 views

Error: "Server sent back a fault indicating it is too busy to process the request" and the WEM Agent fails to connect to the Broker Service

The Citrix Workspace Environment Management Agent fails to connect to the Norskale Infrastructure Service, and the Citrix WEM Agent Service log contains the following error: ConfigurationDataSourcesHelper.CheckAgentBrokerServiceClient : System.ServiceModel.ServerTooBusyException : Server...

7AI score
SaveExploits0
Rows per page
Query Builder