332 matches found
PT-2018-15521
Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows a malicious user to inject log files under certain conditions, potentially hiding important information in the log file. Recommendations For...
PT-2018-15523
Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows a malicious user to prevent legitimate users from accessing the SAP Internet Graphics Server IGS under certain conditions, specifically via...
PT-2018-15525
Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue arises from the failure to properly validate XML External Entity, which can cause the SAP Internet Graphics Server IGS to become unavailable under...
PT-2018-15522
Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows a malicious user to prevent legitimate users from accessing the SAP Internet Graphics Server IGS via the IGS Chart service under certain...
PT-2018-15528
Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows a malicious user to prevent legitimate users from accessing the SAP Internet Graphics Server IGS under certain conditions, by utilizing the...
CVE-2018-2394: Undefined Security Weakness
Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, services and/or system files...
CVE-2018-2391: Undefined Security Weakness
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS portwatcher service...
CVE-2018-2396: Undefined Security Weakness
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, using IGS Interpreter service...
CVE-2018-2393: Improper Restriction of XML External Entity Reference
Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable...
CVE-2018-2390: Undefined Security Weakness
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service...
CVE-2018-2392: Improper Restriction of XML External Entity Reference
Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable...
Cisco IOS <= 12.0.2 Syslog Crash
No description provided by source. source: http://www.securityfocus.com/bid/675/info Cisco devices running classic IOS are reported prone to a denial of service vulnerability. The issue occurs when a vulnerable device receives and processes a UDP packet on UDP port 514 for syslog. This issue...
CVE-2007-3613
Cross-site scripting XSS vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service IGS allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...
CVE-2007-3613
Cross-site scripting XSS vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service IGS allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...
CVE-2007-3613
The vulnerability CVE-2007-3613 is a Cross-site Scripting (XSS) in SAP Internet Graphics Service (IGS), affecting the ADM:GETLOGFILE function. The issue allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter. The NVD entry provides a MEDIUM severity (CVSS v2: AV:N...
CVE-2007-3613: Undefined Security Weakness
Cross-site scripting XSS vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service IGS allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...
SAP Internet Graphics Server XSS and Heap Overflow
======= Summary ======= Name: SAP Internet Graphics Server XSS and Heap Overflow Release Date: 5 July 2007 Reference: NGS00487 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-288 Systems Affected: Risk: Medium Status: Fixed ======== TimeLine ======== Discovered...
CYBSEC - Security Advisory: SAP Internet Graphics Service (IGS) Remote Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteBufferOverflow.pdf This advisory contains the full-detailed information regarding the vulnerability described in...
CVE-2006-6345
CVE-2006-6345 affects SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, with a directory traversal in HTTP requests that lets remote attackers delete arbitrary files. Root cause: traversal sequences exploited by the HTTP handling in IGS. Impact...
CVE-2006-6346
SAP Internet Graphics Service (IGS) affected: 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier (CVE-2006-6346). Described as an unspecified vulnerability related to "Undocumented Features" that could allow remote attackers to cause a denial of service, obtain configuration files,...