Linux Distros Unpatched Vulnerability : CVE-2022-29800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A time-of-check-time-of-use TOCTOU race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the...

Linux Distros Unpatched Vulnerability : CVE-2022-29799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of...

The vulnerability of the grub_extcmd_dispatcher() function of the Grub2 operating system allows a hacker to cause a service failure.

The vulnerability of the grubextcmddispatcher function of the Grub2 operating system is related to an improper check of the returned value from the function. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-7574 · Mrcms · Mrcms

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: The issue is related to a server-side template injection SSTI vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. It is located in the component...

NetworkManager security update

1.48.10-5.0.3 - Drop 777 permissions from the NetworkManager-dispatcher drop-in directory Orabug: 37581907 1.48.10-5.0.2 - Add a dropin file to make Networkmanager-dispatcher persistent Orabug: 36989910...

CVE-2022-34900

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 39313 Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in SAP NetWeaver, ABAP, Web Dispatcher, Business Objects, HCM and Commerce Cloud. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: - Cross-Site Scripting XSS. - Server-Side Request Forgery SSRF. ...

CVE-2024-53102

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-53102

CVE-2024-53102 is rejected/not used; not an active vulnerability entry.

The vulnerability of the SAP Web Dispatcher, related to incomplete filtering of special elements, allows attackers to perform cross-site scripting attacks.

The vulnerability of SAP Web Dispatcher is related to incomplete filtering of special elements. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2024-47593

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or...

CVE-2024-47593 Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or...

CVE-2024-47593

CVE-2024-47593 : SAP NetWeaver Application Server ABAP contains an information disclosure vulnerability. An unauthenticated, network-accessible attacker can read files from the server only if a Web Dispatcher or Proxy is in use and the target file was previously opened or downloaded via an applic...

CVE-2024-47593 Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or...

CVE-2024-47590 Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher

An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, input data will be used by the web site page generation to create content which when executed in the victim's browser XXS or transmitted to...

CVE-2024-47590

This CVE concerns SAP Web Dispatcher. An unauthenticated attacker can craft a malicious link publicly available; when an authenticated victim clicks it, input data used by the web site page generation can trigger XSS in the victim’s browser or SSRF to another server, enabling the attacker to exec...

SAP Web Dispatcher 安全漏洞

SAP Web Dispatcher is a core component of Load Balancing from SAP, which supports load balancing and provides reverse proxy functionality to enable external network users to access internal applications. A security vulnerability exists in SAP Web Dispatcher, which stems from a cross-site scriptin...

PT-2024-8162 · Sap · Sap Web Dispatcher

Name of the Vulnerable Software and Affected Versions: SAP Web Dispatcher versions prior to the November 2024 Patch Day Description: An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, input da...

The vulnerabilities of SAP NetWeaver AS ABAP, SAP NetWeaver AS for Java, SAP Content Server, and SAP Web Dispatcher integration platforms are related to authentication procedures that lack sufficient safeguards. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerabilities of SAP NetWeaver AS ABAP, SAP NetWeaver AS for Java, SAP Content Server, and SAP Web Dispatcher programming integration platforms are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality,...

The vulnerability of the print queue dispatcher in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the print scheduler in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...