CVE-2019-11897

The CVE-2019-11897 issue is a Server-Side Request Forgery (SSRF) in the backup & restore functionality of older ProSyst mBS SDK releases (before 8.2.6) and Bosch IoT Gateway Software (before 9.3.0). The vulnerability allows a remote attacker to forge GET requests to arbitrary URLs, potentially en...

PT-2019-12409

Name of the Vulnerable Software and Affected Versions ProSyst mBS SDK versions prior to 8.2.6 Bosch IoT Gateway Software versions prior to 9.2.0 Description The issue allows remote attackers to gather information about the file system structure due to the leakage of stack traces in remote access ...

CVE-2019-11897: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to rea...

CVE-2019-11602: Generation of Error Message Containing Sensitive Information

Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure...

CVE-2019-11603: Improper Limitation of a Pathname to a Restricted Directory

A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root...

CVE-2019-11601: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any location...

CVE-2018-18394

Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

The vulnerability of the microprogramming software used in the API Gateway, which allows a malicious actor to compromise the confidentiality of information.

The vulnerability of the Oracle API Gateway microprogramming software component related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information through HTTP requests...

WorldSpan Res Manager 4.1 - Malformed TCP Packet Denial of Service

source: https://www.securityfocus.com/bid/5169/info It has been reported that WorldSpan Res Manager 4.1 for Microsoft Windows is vulnerable to a denial of service condition. Res Manager systems are connected to Worldspan via private lines or through the Internet. Before accessing Worldspan, clien...