3211 matches found
cve-2023-34960
cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...
CVE-2026-83319
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...
CVE-2026-83314
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...
CVE-2026-76796
The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope. Fixed in 1.6.2. The fix limits access...
EUVD-2026-79671
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...
CVE-2026-83319
Oracle BI Publisher (component: Web Service API ) in Oracle Analytics version 12.2.1.4.0 is vulnerable to an easily exploitable flaw allowing a low-privileged attacker with network access via SOAP to compromise the product. Due to a scope change , attacks originating in BI Publisher may significa...
EUVD-2026-79666
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...
CVE-2026-83314
CVE-2026-83314 affects the Web Service API component of Oracle BI Publisher (part of Oracle Analytics), versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via SOAP can exploit this vulnerability with low complexity to achieve unauthorized creation, d...
EUVD-2026-79626
The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope. Fixed in 1.6.2. The fix limits access...
CVE-2026-19780
Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...
EUVD-2026-78820
Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...
CVE-2026-19780
CVE-2026-19780 is a remote code execution vulnerability in Koha , a web service listening on TCP port 8081 by default. The flaw stems from improper validation of a user-supplied string before it is passed to the eval function, allowing an authenticated remote attacker to execute arbitrary code in...
CVE-2020-6286
CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard - Traversée de répertoire SAP NetWeaver est la plateforme technologique intégrée de SAP et le fondement technique de toutes les applications SAP depuis SAP Business Suite. SAP NetWeaver est une plateforme applicative et d'intégration...
CVE-2026-82772
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
CVE-2026-82770
Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
EUVD-2026-77225
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
CVE-2026-82772
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
CVE-2026-82772
CVE-2026-82772 is a buffer overflow vulnerability in the web service of the Contec EC1000 series . A remote attacker with low privileges can send a specially crafted request to the product's web service, potentially leading to arbitrary program execution . The vulnerability is rated HIGH severity...
CVE-2026-82770
CVE-2026-82770 is a buffer overflow vulnerability in the Contec RP-WAH-SR Series (industrial I/O controller). A remote attacker with low privileges can send a specially crafted request to the product's web service to achieve arbitrary program execution . The CVSS 3.1 score is 8.8 (HIGH) with a ne...