3211 matches found
cve-2023-34960
cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...
CVE-2026-83319
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...
CVE-2026-83314
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...
CVE-2026-76796
The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope. Fixed in 1.6.2. The fix limits access...
EUVD-2026-79671
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...
CVE-2026-83319
Oracle BI Publisher (component: Web Service API ) in Oracle Analytics version 12.2.1.4.0 is vulnerable to an easily exploitable flaw allowing a low-privileged attacker with network access via SOAP to compromise the product. Due to a scope change , attacks originating in BI Publisher may significa...
EUVD-2026-79666
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...
CVE-2026-83314
CVE-2026-83314 affects the Web Service API component of Oracle BI Publisher (part of Oracle Analytics), versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via SOAP can exploit this vulnerability with low complexity to achieve unauthorized creation, d...
EUVD-2026-79626
The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope. Fixed in 1.6.2. The fix limits access...
CVE-2026-19780
Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...
EUVD-2026-78820
Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...
CVE-2026-19780
CVE-2026-19780 is a remote code execution vulnerability in Koha , a web service listening on TCP port 8081 by default. The flaw stems from improper validation of a user-supplied string before it is passed to the eval function, allowing an authenticated remote attacker to execute arbitrary code in...
CVE-2020-6286
CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard 디렉터리 트래버설 SAP NetWeaver는 SAP의 통합 기술 플랫폼이자 SAP Business Suite 이후 모든 SAP 애플리케이션의 기술적 기반입니다. SAP NetWeaver는 서비스 지향적 애플리케이션 및 통합 플랫폼으로서, SAP 애플리케이션을 위한 개발 및 실행 환경을 제공하며 맞춤형 개발과 다른 애플리케이션 및 시스템과의 통합에도 사용할 수 있습니다. SAP NetWeaver AS JAVALM...
CVE-2026-82772
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
CVE-2026-82770
Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
EUVD-2026-77225
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
CVE-2026-82772
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed...
CVE-2026-82772
CVE-2026-82772 is a buffer overflow vulnerability in the web service of the Contec EC1000 series . A remote attacker with low privileges can send a specially crafted request to the product's web service, potentially leading to arbitrary program execution . The vulnerability is rated HIGH severity...
CVE-2026-82770
CVE-2026-82770 is a buffer overflow vulnerability in the Contec RP-WAH-SR Series (industrial I/O controller). A remote attacker with low privileges can send a specially crafted request to the product's web service to achieve arbitrary program execution . The CVSS 3.1 score is 8.8 (HIGH) with a ne...