Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-14345

Malware in sbrugna...

6.5CVSS6.3AI score0.0028EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/08/27 10:21 a.m.1 views

CVE-2025-30041 Missing authentication in APIs returning statistical data along with session IDs

The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs...

9CVSS7.2AI score0.00036EPSS
Exploits0References1
Wallarm Lab
Wallarm Lab
added 2022/07/13 5:47 p.m.93 views

10 Years Journey into API Security Vulnerabilities with Ivan, the CEO of Wallarm

Ivan Novikov, CEO at Wallarm, is an API security expert, bug hunter, security researcher, and blackhat speaker with 24 years of experience in the cybersecurity field. He spent decades in this industry and witnessed exploits as well as growth. Read ahead to understand Ivan’s API Security journey a...

10CVSS0.94434EPSS
Exploits22
NVD
NVD
added 2021/04/13 7:15 p.m.17 views

CVE-2021-27598

SAP NetWeaver AS JAVA Customer Usage Provisioning Servlet, versions - 7.31, 7.40, 7.50, allows an attacker to read some statistical data like product version, traffic, timestamp etc. because of missing authorization check in the servlet...

6.5CVSS0.0028EPSS
Exploits0References2
Prion
Prion
added 2021/04/13 7:15 p.m.18 views

Authorization

SAP NetWeaver AS JAVA Customer Usage Provisioning Servlet, versions - 7.31, 7.40, 7.50, allows an attacker to read some statistical data like product version, traffic, timestamp etc. because of missing authorization check in the servlet...

5CVSS5.2AI score0.0028EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2018/02/14 12:29 p.m.16 views

Code injection

In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption...

4CVSS6.4AI score0.00294EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2018/02/14 12:29 p.m.9 views

CVE-2018-2378

In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption...

6.5CVSS6.4AI score0.00294EPSS
Exploits0References2
CVE
CVE
added 2018/02/14 12:0 p.m.47 views

CVE-2018-2378

SAP HANA Extended Application Services (EAS) 1.0 is affected by CVE-2018-2378, where unauthorized users can read statistical data about deployed applications, including resource consumption (information disclosure). The exact root cause, exploitable vectors, and fixes are not detailed in the prov...

6.5CVSS6.4AI score0.00294EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2018/02/14 12:0 p.m.16 views

CVE-2018-2378

In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption...

6.4AI score0.00294EPSS
Exploits0References2
Rows per page
Query Builder