SAP NetWeaver Application Server ABAP and ABAP Platform信息泄露漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany.An information disclosure vulnerability exists in SAP NetWeaver Application Server ABAP and ABAP Platform, which can be exploited by attackers to read connection details stored in SAP The vulnerability can be exploited to...

CVE-2022-22545

A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756...

Design/Logic Flaw

A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756...

Integer overflow

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. There are a number of implementation errors in the parsing of...

CVE-2022-22545

A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756...

CVE-2022-24667

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. There are a number of implementation errors in the parsing of...

CVE-2022-22001

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...

CVE-2022-22001

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...

CVE-2022-21985

Windows Remote Access Connection Manager Information Disclosure Vulnerability...

CVE-2022-21985

Windows Remote Access Connection Manager Information Disclosure Vulnerability...

Information disclosure

Windows Remote Access Connection Manager Information Disclosure Vulnerability...

Privilege escalation

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...

CVE-2022-22001

CVE-2022-22001 affects Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. Connected documents confirm the CVE in Microsoft Windows contexts and list a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges required, NONE user interaction, HIGH impact...

CVE-2022-21985

CVE-2022-21985 is a Windows vulnerability described as an Information Disclosure vulnerability in the Windows Remote Access Connection Manager. The CVSS details show a local attack vector with low complexity (CVSSv3.1 base score 5.5, MEDIUM severity), where confidentiality is impacted. The descri...

AlmaLinux 8 : curl (ALSA-2021:3582)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:3582 advisory. - When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The...

Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat

An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial of service...

Windows Remote Access Connection Manager Information Disclosure Vulnerability

...

Microsoft Windows Remote Access Connection Manager权限许可和访问控制问题漏洞

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet. If you disable this service, the VPN client application will If you disable this service, VPN client applications will no...

KLA12458 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability ...

Mozilla Firefox 访问控制错误漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. An access control error vulnerability exists in Mozilla Firefox, which stems from the Remote Agent used in WebDriver not validating the Host or Origin header. An attacker could exploit the vulnerability to force...