61 matches found
CVE-2022-41586
The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality...
Code injection
The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality...
PT-2022-25960 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: Communication framework module affected versions not specified Description: The issue is related to the communication framework module not truncating data properly. Successful exploitation may affect data confidentiality. Recommendations: At...
CVE-2022-41586
The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-41586
CVE-2022-41586 affects Huawei HarmonyOS' Communication framework module, where data truncation vulnerability may lead to confidentiality exposure. CVSSv3.1 shows 7.5 (HIGH) with Network access, no user interaction, and no privileges required. Connected documents indicate the vulnerability exists ...
CVE-2022-41586
The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2022-40187
Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...
CVE-2022-40187
Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which originates from an untruncated vulnerability in the Communication Framework component...
SAP NetWeaver AS ABAP Multiple Vulnerabilities (Oct 2021)
Multiple vulnerabilities may be present in SAP NetWeaver Application Server ABAP, including the following: - SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allows an attacker to prevent legitimate users from accessing a service,...
CVE-2021-40496
SAP Internet Communication framework ICM - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 785, allows an attacker with logon functionality, to exploit the authentication function by using POST and form field to repeat executions of the initial command by a GET request a...
PT-2021-22902 · Sap · Sap Internet Communication Framework
Name of the Vulnerable Software and Affected Versions: SAP Internet Communication framework ICM versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 785 Description: The issue allows an attacker with logon functionality to exploit the authentication function. This can be done...
Sap Internet Communication Framework 访问控制错误漏洞
Sap Internet Communication Framework is an Internet communication framework from Sap, a German company. A security vulnerability exists in SAP Internet Communication framework, which arises from a configuration or other error in the operation of a network system or product. An unauthorized attack...
Halibut input validation error vulnerability
Halibut, a secure, RPC-based open source communication framework from Octopus Deploy individual developers, is vulnerable to an input validation error that stems from a deserialization vulnerability in versions of Halibut prior to version 4.4.7 that could allow remote execution on systems that ar...
CVE-2016-9832
PricewaterhouseCoopers PwC ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via 1 SAPGUI or 2 Internet Communication Framework ICF over HTTP or HTTPS, as demonstrated by WEBGUI or Report...
Nmap NSE net: wsdd-discover
Retrieves and displays information from devices supporting the Web Services Dynamic Discovery WS- Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. OpenVAS Vulnerability Test $Id: gbnmapwsdddiscovernet.nasl 5499...
Nmap NSE net: broadcast-wsdd-discover
Uses a multicast query to discover devices supporting the Web Services Dynamic Discovery WS- Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. OpenVAS Vulnerability Test $Id: gbnmapbroadcastwsdddiscovernet.nasl 5499...
wsdd-discover NSE Script
Retrieves and displays information from devices supporting the Web Services Dynamic Discovery WS-Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. Script Arguments max-newtargets, newtargets See the documentation for t...
SAP Internet Communication Framework多个跨站脚本漏洞
SAP Internet Communication Framework是一款Internet通信架构。 SAP Internet Communication Framework不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 默认的登录错误页不正确过滤用户提交的输入，可触发跨站脚本问题，构建恶意WEB页，诱使用户访问，可导致获得目标用户敏感信息。 SAP Internet Communication Framework 700 SP11 SAP Internet Communication Framework 640 SP19 SAP Note N...
