14 matches found
EUVD-2021-21704
Malware in sbrugna...
EUVD-2021-21705
Malware in sbrugna...
CVE-2021-35060
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
CVE-2021-35059
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter...
CVE-2021-35060
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
CVE-2021-35060
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
CVE-2021-35059
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter...
Information disclosure
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
CVE-2021-35060
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...
CVE-2021-35060
CVE-2021-35060 affects OpenWay WAY4 ACS prior to version 1.2.278-2693. The issue allows unauthenticated attackers to leverage response differences to determine whether a specific payment card number is stored in the system (information disclosure). The connected records consistently describe the ...
CVE-2021-35059
OpenWay WAY4 ACS
CVE-2021-35059
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter...
CVE-2021-35060: Generation of Error Message Containing Sensitive Information
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system...