83 matches found
The vulnerability of the virNWFilterObjListNumOfNWFilters method in the virtualization management library Libvirt allows a attacker to trigger a service failure.
The vulnerability of the virNWFilterObjListNumOfNWFilters method in the Libvirt virtualization management library is related to insufficient blocking mechanisms. Exploiting this vulnerability allows a remote attacker to cause service failures...
CVE-2022-35227
A vulnerability in SAP NW EP WPC - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site XSS scripting attack. A successful exploit could allow the attacker to execute arbitrary script code which could lead to...
Cross site scripting
A vulnerability in SAP NW EP WPC - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site XSS scripting attack. A successful exploit could allow the attacker to execute arbitrary script code which could lead to...
CVE-2022-35227
CVE-2022-35227 — SAP NW EP (WPC) : A cross-site scripting vulnerability affects SAP NetWeaver EP (WPC) versions 7.30, 7.31, 7.40, and 7.50 due to inadequate validation of user-controlled input. A remote attacker could exploit this to run arbitrary script code, potentially stealing or modifying us...
CVE-2022-35227: Improper Neutralization of Input During Web Page Generation
A vulnerability in SAP NW EP WPC - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site XSS scripting attack. A successful exploit could allow the attacker to execute arbitrary script code which could lead to...
PT-2022-4935
Name of the Vulnerable Software and Affected Versions SAP NW EP WPC versions 7.30 through 7.50 Description A vulnerability in SAP NW EP WPC does not sufficiently validate user-controlled input, allowing a remote attacker to conduct a Cross-Site XSS scripting attack. This could lead to the executi...
MAL-2022-6848 Malicious code in usaa-nw-build-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f8770fd569e77308417d4270871ab91fb9903d97683fd91c6e3259e6950bd2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4981 Malicious code in nw-api-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fd21de2bcd0c316686e1736a541c5ace608448936e3edbcc38d4efae6135c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nw-api-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fd21de2bcd0c316686e1736a541c5ace608448936e3edbcc38d4efae6135c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-11218
Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
Denial of service
Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
nw-local.go.th Cross Site Scripting vulnerability OBB-1277938
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2014-9530: Undefined Security Weakness
A vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames, which has an unspecified impact...
nw-with-arm downloads Resources over HTTP
Affected versions of nw-with-arm insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...
GHSA-9JF3-F2PG-7868 nw-with-arm downloads Resources over HTTP
Affected versions of nw-with-arm insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...
GHSA-WQ7Q-7VFH-2X3H install-nw downloads Resources over HTTP
Affected versions of install-nw insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...
allume (>=0.32.1, <=0.45.2), bespoke-pdf (0.0.0) +35 more potentially affected by CVE-2016-10588 via nw (>=0.12.0, <=0.23.1)
nw NPM version =0.12.0, =0.32.1, =1.0.0, =0.3.1, =0.64.0, =0.1.0, =0.1.7, =0.0.1, =0.0.10, =0.0.1, =0.1.3-alpha.3, =0.0.16, =0.0.17 and more Source cves: CVE-2016-10588 Source advisory: OSV:GHSA-HV96-XXX2-5V7W...
GHSA-HV96-XXX2-5V7W Downloads Resources over HTTP in nw
Affected versions of nw insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...
Downloads Resources over HTTP in nw
Affected versions of nw insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...