25 matches found
CVE-2023-29111
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
Malicious code in asta-aif-dak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ccc7f04a6b136cdf61e12d99b224851cfcb14a78bb6f550026703a3886a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-138029
Malicious code in asta-aif-dak npm...
MAL-2025-181580 Malicious code in asta-aif-dak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ccc7f04a6b136cdf61e12d99b224851cfcb14a78bb6f550026703a3886a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134568
Malicious code in kisut-afncg-aif npm...
EUVD-2025-134569
Malicious code in kisut-afncg-aif npm...
Malicious code in nuyar-mar-aif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab6ffa2bcaebe34ba11381ba48619f1c9b452408316f3deaef4893482302d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-139464
Malicious code in nuilva-darde-aif npm...
Malicious code in nuilva-darde-aif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b2bf4b178ccc3bb1fae074e6347fef85448edf6e9f8923b22b87a1ae5e8c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-139015
Malicious code in poglymer-ogaih-aif npm...
EUVD-2025-139061
Malicious code in nuyar-mar-aif npm...
EUVD-2023-32714
Malicious code in bioql PyPI...
CVE-2023-23450
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via...
CVE-2023-29111
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
CVE-2023-29111
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
Design/Logic Flaw
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
CVE-2023-29111
CVE-2023-29111 affects SAP Application Interface Framework (AIF) ODATA service versions 755 and 756. The vulnerability arises from excessive information disclosure in the AIF component, allowing an authorized attacker to leverage disclosed details to potentially exploit the component, with a low ...
CVE-2023-29111 Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
CVE-2023-29109
CVE-2023-29109 affects SAP Application Interface Framework (Message Dashboard) across AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755/756, SAP_ABA 75C/75D/75E. The root cause is an Excel formula injection in fields such as the Tooltip of the Custom Hints List, which can execute when the victim opens...
aif-map.de Cross Site Scripting vulnerability OBB-2785967
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...