Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/06/10 2:59 a.m.9 views

CVE-2026-44754

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS5.5AI score0.00219EPSS
Exploits0References1
NVD
NVD
added 2026/06/09 1:16 a.m.14 views

CVE-2026-44754

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS0.00219EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/06/09 12:21 a.m.39 views

CVE-2026-44754 Missing caller identification check-in for ODP Data Replication APIs

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS0.00219EPSS
Exploits0References2
EUVD
EUVD
added 2026/06/09 12:21 a.m.10 views

EUVD-2026-35286

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS5.5AI score0.00219EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/09 12:21 a.m.6 views

CVE-2026-44754

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS5.5AI score0.00219EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/09 12:21 a.m.7 views

CVE-2026-44754 Missing caller identification check-in for ODP Data Replication APIs

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS5.5AI score0.00219EPSS
Exploits0References2
CVE
CVE
added 2026/06/09 12:21 a.m.44 views

CVE-2026-44754

The CVE-2026-44754 issue affects SAP’s Operational Data Provisioning (ODP) RFC APIs, where RFC modules fail to perform caller identification for allowed SAP-internal applications. This allows customer/third-party applications to use ODP-RFC functionality in ways not aligned with its intended usag...

6.6CVSS5.5AI score0.00219EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.13 views

SAP ODP Data Replication APIs 安全漏洞

SAP ODP Data Replication APIs are a set of enterprise data replication interfaces provided by the German company SAP. There is a security vulnerability in SAP ODP Data Replication APIs, which stems from the lack of identification of callers for allowed internal SAP applications. If these APIs are...

6.6CVSS5.3AI score0.00219EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.9 views

PT-2026-47537

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS5.5AI score0.00219EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/27 3:33 p.m.11 views

EUVD-2026-32278

In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. This allows them to bypass admin authentication and gain full access to the service protocol and configuration panel...

9.3CVSS5.8AI score0.00662EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.9 views

PT-2026-43701

In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. This allows them to bypass admin authentication and gain full access to the service protocol and configuration panel...

9.3CVSS5.9AI score0.00625EPSS
Exploits0References2
NVD
NVD
added 2026/03/31 8:16 p.m.0 views

CVE-2026-30290

An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

8.4CVSS0.00231EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.3 views

InTouch Contacts & Caller ID 安全漏洞

InTouch Contacts & Caller ID is a communication management app developed by the Indian company InTouch. It provides features for backup of contacts, synchronization, and caller identification. Version 6.38.1 of InTouch Contacts & Caller ID contains a security vulnerability. This vulnerability ste...

8.4CVSS6.3AI score0.00231EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2026/02/13 1:30 a.m.4 views

CVE-2026-20638

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3. A user with Live Caller ID app extensions turned off could have identifying information leaked to the extensions...

5.5CVSS5.5AI score0.00144EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 7 : kdelibs-4.14.8-6.el7 (AXSA:2017-1655:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1655:01 advisory. Libraries for KDE 4. Security issues fixed with this release: CVE-2017-8422 KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root...

7.8CVSS7.5AI score0.01805EPSS
Exploits3References2
CNNVD
CNNVD
added 2025/07/20 12:0 a.m.3 views

CallApp Caller ID App 安全漏洞

CallApp Caller ID App is an intelligent caller identification and blocking application from the Israeli company CallApp A security vulnerability exists in CallApp Caller ID App version 2.0.4 and earlier, which stems from an improper export of the caller.id.phone.number.block component of the...

5.5CVSS5.5AI score0.00219EPSS
Exploits1References2
OSV
OSV
added 2024/09/04 5:15 p.m.2 views

CVE-2024-20497

A vulnerability in Cisco Expressway Edge Expressway-E could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access MRA users. An attacker could exploit this vulnerabilit...

4.3CVSS5.8AI score0.00322EPSS
Exploits0References1
OSV
OSV
added 2024/08/05 10:15 a.m.1 views

CVE-2024-40096

The com.cascadialabs.who aka Who - Caller ID, Spam Block application 15.0 for Android places sensitive information in the system log...

3.3CVSS5.8AI score0.00163EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/07/12 12:0 a.m.3 views

SAMSUNG Mobile devices isemtelephony 安全漏洞

Samsung isemtelephony is a telephony service for Samsung SAMSUNG mobile devices. samsung isemtelephony suffers from an information disclosure vulnerability that stems from incorrect authorization in isemtelephony, which could be exploited by an attacker to obtain a CID without permission...

4CVSS5.6AI score0.00095EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/07/11 12:0 a.m.4 views

PT-2022-20296 · Unknown · Isemtelephony

Name of the Vulnerable Software and Affected Versions: isemtelephony versions prior to SMR Jul-2022 Release 1 Description: The issue is related to improper authorization, allowing an attacker to obtain CID without the necessary ACCESS FINE LOCATION permission. Recommendations: For versions prior ...

4CVSS3.8AI score0.00095EPSS
Exploits0References3
Rows per page
Query Builder