3148 matches found
CVE-2024-42374 XML injection in SAP BEx Web Java Runtime Export Web Service
BEx Web Java Runtime Export Web Service does not sufficiently validate an XML document accepted from an untrusted source. An attacker can retrieve information from the SAP ADS system and exhaust the number of XMLForm service which makes the SAP ADS rendering PDF creation unavailable. This affects...
D-Link G416 Buffer Overflow Vulnerability
D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 , which supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a buffer overflow vulnerability that stems from not properly validating the length of...
SAP BEx Web Java Runtime Export Web Service 安全漏洞
SAP BEx Web Java Runtime Export Web Service is a service for creating Java-based Web applications from SAP, Germany. A security vulnerability exists in SAP BEx Web Java Runtime Export Web Service that stems from the presence of an XML injection vulnerability...
D-Link G416 Command Injection Remote Code Execution Vulnerability
The D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 and supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a command injection remote code execution vulnerability that originates in an HTTP servi...
PT-2024-29625 · Unknown · Sinec Traffic Analyzer
Name of the Vulnerable Software and Affected Versions: SINEC Traffic Analyzer versions prior to V2.0 Description: The affected application does not properly handle cacheable HTTP responses in the web service, which could allow an attacker to read and modify data stored in the local cache...
The vulnerability of the CORS (Cross-Origin Resource Sharing) mechanism in the exacqVision Web Service web interface of the exacqVision surveillance system allows attackers to circumvent security restrictions and execute cross-origin attacks.
The vulnerability of the CORS Cross-Origin Resource Sharing mechanism in the exacqVision Web Service web interface of the video surveillance system exists due to incorrect processing of the HTTP header “Origin”. Exploiting this vulnerability allows a malicious actor to bypass security restriction...
The vulnerability of the exacqVision Web Service web interface of the exacqVision surveillance system, related to the disclosure of information through query strings, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the exacqVision Web Service web interface of the video surveillance system involves the disclosure of information through query strings during the processing of authentication tokens. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorize...
The vulnerability of the exacqVision Web Service interface of the video surveillance system, related to the manipulation of cross-site requests, allows a perpetrator to perform a CSRF attack.
The vulnerability of the exacqVision Web Service interface of the video surveillance system involves the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
The vulnerability of the HTTPS implementation of the exacqVision Web Service interface of the video surveillance system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the HTTPS implementation of the exacqVision Web Service in the video surveillance system exacqVision relates to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...
The vulnerability in the web interface of the exacqVision Web Service of the exacqVision surveillance system arises from errors in the TLS certificate validation process. This vulnerability allows a perpetrator to carry out a “man-in-the-middle” attack.
The vulnerability of the exacqVision Web Service web interface of the video surveillance system involves errors in the authentication process for TLS certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “Man-in-the-Middle” attack...
Security Bulletin: IBM Sterling Connect:Direct Web Service is affected by Java JWT vulnerability
Summary IBM Sterling Connect:Direct Web Service is vulnerable to JJWT version 0.9.1. Connect:Direct Web Services has upgraded to version 0.12.5 to address CVE-2024-31033. Vulnerability Details CVEID:CVE-2024-31033 DESCRIPTION: An unspecified error with ignoring certain characters in jwtk JJWT aka...
Johnson Controls exacqVision Web Service < 24.06 Multiple Vulnerabilities
The version of the Johnson Controls exacqVision Web Service running on the remote host is prior to 24.03. It is, therefore, affected by multiple vulnerabilities. - Under certain circumstances the exacqVision Web Services does not provide sufficient protection from untrusted domains. CVE-2024-3286...
PT-2024-38444 · Logsign · Logsign Unified Secops Platform
Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to delete arbitrary directories on affected installations. The flaw exists within the HTTP API service, which listens on TCP port...
CVE-2024-32931
Under certain circumstances the exacqVision Web Service can expose authentication token details within communications...
CVE-2024-32931
Under certain circumstances the exacqVision Web Service can expose authentication token details within communications...
CVE-2024-32931
Summary of CVE-2024-32931 : Johnson Controls exacqVision Web Service (versions up to 24.03) may expose authentication token details in communications, via use of GET requests with sensitive query strings. The issue has a CVSS v3.1 base score of 5.7 (Network, Low complexity, Privileges Low, User I...
CVE-2024-32931 exacqVison - Token Disclosed in URL
Under certain circumstances the exacqVision Web Service can expose authentication token details within communications...
CVE-2024-32931 exacqVison - Token Disclosed in URL
Under certain circumstances the exacqVision Web Service can expose authentication token details within communications...