1017 matches found
PT-2024-13835 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.2.4 Description: An issue was discovered in Couchbase Server where cURL calls to the "/diag/eval" API endpoint are not sufficiently restricted. Recommendations: For versions prior to 7.2.4, update to versi...
CVE-2023-49931
An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted...
CVE-2023-49930
An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not sufficiently restricted...
CVE-2023-49930: Improper Access Control
An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not sufficiently restricted...
CVE-2023-49930
An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not sufficiently restricted...
PT-2024-13836 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.2.4 Description: An issue was discovered where SQL++ cURL calls to the "/diag/eval" API endpoint are not sufficiently restricted. Recommendations: For versions prior to 7.2.4, update to version 7.2.4 or...
CVE-2023-49931: Improper Access Control
An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted...
Sncscan - Tool For Analyzing SAP Secure Network Communications (SNC)
Tool for analyzing SAP Secure Network Communications SNC. How to use? In its current state, sncscan can be used to read the SNC configurations for SAP Router and DIAG SAP GUI connections. The implementation for the SAP RFC protocol is currently in development. SAP Router SAP Routers can either...
CVE-2023-33014
Information disclosure in Core services while processing a Diag command...
Information disclosure
Information disclosure in Core services while processing a Diag command...
CVE-2023-33014
Technical details for CVE-2023-33014 are not publicly provided in the connected documents. The available entries mention information disclosure in Core services during a Diag command, but do not specify affected products/versions or a fix. Monitor for updates.
CVE-2023-33014 Improper Input Validation in Services
Information disclosure in Core services while processing a Diag command...
CVE-2023-33014: Improper Input Validation
Information disclosure in Core services while processing a Diag command...
PT-2024-12373 · Unknown · Coreservices
Name of the Vulnerable Software and Affected Versions: Core services affected versions not specified Description: The issue is related to information disclosure in Core services when processing a Diag command. Recommendations: At the moment, there is no information about a newer version that...
CVE-2023-33018
Memory corruption while using the UIM diag command to get the operators name...
CVE-2023-28551
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments...
Memory corruption
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments...
CVE-2023-33018
CVE-2023-33018 describes a memory corruption in the Qualcomm UIM (User Identity Module) related to the diag command used to retrieve the operator’s name. The CVE is rated HIGH with a CVSS v3.1 base score of 7.8 (LOCAL attack vector, LOW attack complexity, LOW privileges required, no user interact...