Lucene search
+L

119 matches found

OSV
OSV
•added 2023/09/04 2:15 a.m.•12 views

CVE-2023-38554

In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additional execution privileges...

5.5CVSS5.9AI score0.00086EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/04 2:15 a.m.•22 views

CVE-2023-38554

In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additional execution privileges...

5.5CVSS5.5AI score0.00086EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/04 1:16 a.m.•21 views

CVE-2023-38554

In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additional execution privileges...

7.1AI score0.00086EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/04 1:16 a.m.•56 views

CVE-2023-38554

CVE-2023-38554 concerns the wcn bsp driver with an out-of-bounds write caused by a missing bounds check, potentially enabling local denial of service with no extra privileges. Affected component: wcn bsp driver (UnISOC context). Impact: local DoS (availability impact) as stated; no explicit explo...

5.5CVSS5.5AI score0.00086EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/04 12:00 a.m.•21 views

PT-2023-26509 · Unknown · Wcn Bsp Driver

Name of the Vulnerable Software and Affected Versions: Wcn Bsp Driver affected versions not specified Description: The issue is related to a missing bounds check in the Wcn Bsp Driver, which could lead to a possible out of bounds write. This may result in a local denial of service with no...

5.5CVSS5.3AI score0.00086EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/04 12:00 a.m.•3 views

CVE-2023-38554: Out-of-bounds Write

In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additional execution privileges...

5.5CVSS6.1AI score0.00086EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/05/24 12:00 a.m.•30 views

CVE-2023-33980

Bramble Synchronisation Protocol BSP in Briar before 1.4.22 allows attackers to cause a denial of service repeated application crashes via a series of long messages to a contact...

7.5AI score0.00884EPSS
SaveExploits1References2
CVE
CVE
•added 2023/05/24 12:00 a.m.•80 views

CVE-2023-33980

Briar Briar BSP vulnerability (CVE-2023-33980) affects Briar versions prior to 1.4.22. The issue, rooted in the Bramble Synchronisation Protocol, allows an attacker to trigger a denial of service by sending a series of long messages to a contact, causing repeated application crashes. The public d...

7.5CVSS7.2AI score0.00884EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2023/02/14 4:15 a.m.•18 views

CVE-2023-25614

SAP NetWeaver AS ABAP BSP Framework application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unauthenticated attacker to inject the code that can be executed by the application over the network. On successful exploitation it can gain access to the sensitive...

6.1CVSS6.3AI score0.00388EPSS
SaveExploits0References2
OSV
OSV
•added 2023/02/14 4:15 a.m.•17 views

CVE-2023-24529

Due to lack of proper input validation, BSP application CRMBSPFRAME - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a Reflected Cross-Site Scripting XSS attack. As a...

6.1CVSS6.4AI score0.00357EPSS
SaveExploits0References2
NVD
NVD
•added 2023/02/14 4:15 a.m.•31 views

CVE-2023-24529

Due to lack of proper input validation, BSP application CRMBSPFRAME - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a Reflected Cross-Site Scripting XSS attack. As a...

6.1CVSS6AI score0.00357EPSS
SaveExploits0References2
Prion
Prion
•added 2023/02/14 4:15 a.m.•31 views

Design/Logic Flaw

SAP NetWeaver AS ABAP BSP Framework application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unauthenticated attacker to inject the code that can be executed by the application over the network. On successful exploitation it can gain access to the sensitive...

5.8CVSS6.4AI score0.00388EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/02/14 4:15 a.m.•27 views

Cross site scripting

Due to lack of proper input validation, BSP application CRMBSPFRAME - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a Reflected Cross-Site Scripting XSS attack. As a...

5.8CVSS6AI score0.00357EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/02/14 4:15 a.m.•33 views

Input validation

Due to insufficient input sanitization, SAP NetWeaver AS ABAP BSP Framework - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the...

5.8CVSS6.5AI score0.00388EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/02/14 3:20 a.m.•81 views

CVE-2023-25614

CVE-2023-25614 affects SAP NetWeaver AS ABAP (BSP Framework) versions 700–757. An unauthenticated attacker can inject code executed by the application over the network, leading to limited impact on confidentiality and integrity. Connected sources (Red Hat, Nessus/NASL, and others) confirm the sam...

6.1CVSS6.4AI score0.00388EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/02/14 3:20 a.m.•48 views

CVE-2023-25614

SAP NetWeaver AS ABAP BSP Framework application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unauthenticated attacker to inject the code that can be executed by the application over the network. On successful exploitation it can gain access to the sensitive...

6.1CVSS6.7AI score0.00388EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/02/14 3:19 a.m.•47 views

CVE-2023-24529

Due to lack of proper input validation, BSP application CRMBSPFRAME - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a Reflected Cross-Site Scripting XSS attack. As a...

6.1CVSS6.1AI score0.00357EPSS
SaveExploits0References2
CVE
CVE
•added 2023/02/14 3:19 a.m.•75 views

CVE-2023-24529

CVE-2023-24529 involves a Reflected Cross-Site Scripting (XSS) vulnerability in the BSP application (CRM_BSP_FRAME) affecting versions 700, 701, 702, 731, 740, 750, 751, 752, 75C–75H. Root cause: inadequate input validation that allows malicious inputs from untrusted sources to be processed serve...

6.1CVSS5.9AI score0.00357EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/02/14 3:16 a.m.•80 views

CVE-2023-24521

CVE-2023-24521 affects SAP NetWeaver AS ABAP (BSP Framework) versions 700–757. The issue stems from insufficient input sanitization, allowing an unauthenticated user to inject malicious code over the network to alter the current user session and access unintended data, with a limited impact on co...

6.1CVSS6.5AI score0.00388EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/02/14 3:10 a.m.•76 views

CVE-2023-0025

Summary: CVE-2023-0025 affects SAP Solution Manager (BSP Application) version 720. An authenticated attacker can craft a malicious link that, when a user clicks it, may read or modify sensitive information or craft a payload to restrict access. What is affected: SAP Solution Manager (BSP Applicat...

6.5CVSS5.1AI score0.00345EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder