2023

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 12

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 12

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 12

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH h

OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can acce

Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote una

Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker wi

CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If

Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function o

National land numerical information data conversion tool all versions improperly restricts XML external entity reference

HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to a

Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the

Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific f

Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web managemen

Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated at

Android App 'Wolt Delivery: Food and more' version 4.27.2 and earlier uses hard-coded credentials (API key for an extern

WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service pa

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the servi

All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerabi

All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper s

SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 8

A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup (Software Installation Progr

In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a

SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756,

The SAP Application Interface (Message Monitoring) - versions 600, 700, allows an authorized attacker to input links or

The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized att

The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP

The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756

The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vul

An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - version

SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attac

In SAP NetWeaver Enterprise Portal - version 7.50, an unauthenticated attacker can attach to an open interface and make

In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a com

SAP GUI for HTML - versions KERNEL 7.22, 7.53, 7.54, 7.77, 7.81, 7.85, 7.89, 7.91, KRNL64UC, 7.22, 7.22EXT, KRNL64UC 7.2

Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - ver

Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities t

SAP HCM Fiori App My Forms (Fiori 2.0) - version 605, does not perform necessary authorization checks for an authenticat

Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauth

Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack.

An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPrefere

LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnera

Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wac

Wacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability.

SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for ga

A man in the middle can redirect traffic to a malicious server in a compromised configuration.

A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web script