20 matches found
EUVD-2021-21705
Malware in sbrugna...
EUVD-2021-21704
Malware in sbrugna...
CVE-2021-35060
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
CVE-2021-35059
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter...
CVE-2021-35060
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
CVE-2021-35059
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter...
CVE-2021-35059
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter...
Design/Logic Flaw
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter...
CVE-2021-35059
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter...
CVE-2021-35060
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
Information disclosure
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
CVE-2021-35060
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
CVE-2021-35060
CVE-2021-35060 affects OpenWay WAY4 ACS prior to version 1.2.278-2693. The issue allows unauthenticated attackers to leverage response differences to determine whether a specific payment card number is stored in the system (information disclosure). The connected records consistently describe the ...
CVE-2021-35059
OpenWay WAY4 ACS
CVE-2021-35059
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter...
OpenWay Group WAY4 ACS security vulnerability
OpenWay Group Way4 Acs is a digital payment solution from OpenWay Group Belgium. It is used for account management, digital wallets, card issuance, acquiring, interchange, e-commerce gateways and omni-channel digital banking. A security vulnerability exists in OpenWay Group WAY4 ACS prior to...
CVE-2021-35060: Generation of Error Message Containing Sensitive Information
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
PT-2021-20819
Name of the Vulnerable Software and Affected Versions: OpenWay WAY4 ACS versions prior to 1.2.278-2693 Description: The issue allows unauthenticated attackers to discover whether a specific payment card number is stored in the system by leveraging response differences. The "/way4acs/enroll"...
PT-2021-20818
Name of the Vulnerable Software and Affected Versions: OpenWay WAY4 ACS versions prior to 1.2.278-2693 Description: The issue allows for XSS via the "/way4acs/enroll" action parameter. This means an attacker could potentially inject malicious scripts into the application, affecting users who...