467 matches found
CVE-2021-33949
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function...
CVE-2021-33949: Improper Control of Generation of Code
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function...
CVE-2021-33949
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function...
CVE-2022-48300
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-48300
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-48299
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
Design/Logic Flaw
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
Design/Logic Flaw
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-48299
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-48299
CVE-2022-48299 affects Huawei HarmonyOS: the WMS module exposes APIs without proper authentication. Root cause: insufficient authentication in the WMS interface. Impact: potential data confidentiality loss via network access (CVSS 3.1 base score 7.5). Exploitation status is not detailed in the pr...
CVE-2022-48299
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-48300
CVE-2022-48300 affects Huawei HarmonyOS WMS module where certain APIs lack authentication, enabling potential data confidentiality impact. The issue is documented with CVSS v3.1 base score 7.5 (Network vector, Low attack complexity, No privileges required, Confidentiality impact High). Connected ...
CVE-2022-48300
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
PT-2023-15678
Name of the Vulnerable Software and Affected Versions WMS module affected versions not specified Description The issue is related to the lack of an authentication mechanism in some APIs of the WMS module. This could potentially affect data confidentiality if successfully exploited. Recommendation...
PT-2023-15680
Name of the Vulnerable Software and Affected Versions WMS module affected versions not specified Description The issue is related to the lack of an authentication mechanism in some APIs of the WMS module. This could potentially affect data confidentiality if successfully exploited. Recommendation...
CVE-2022-48300
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-48299: Missing Authentication for Critical Function
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-48300: Missing Authentication for Critical Function
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...