2023

SAP Authenticator for Android - version 1.3.0, allows the screen to be captured, if an authorized attacker installs a ma

SAP BusinessObjects Business Intelligence Platform (Web Services) - versions 420, 430, allows an attacker to inject arbi

An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP So

SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757,

An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-wr

SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assign

In SAP BusinessObjects Business Intelligence Platform (Web Services) - versions 420, 430, an attacker can control a mali

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754,

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754,

SAP NetWeaver AS Java (Object Analyzing Service) - version 7.50, does not perform necessary authorization checks, allowi

SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges

Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perform any authenticatio

Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 7

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scriptin

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754,

SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, wh

In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object executio

Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated h

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks f

Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to att

Due to insufficient encoding of user input, SAP NetWeaver - versions 700, 701, 702, 731, 740, 750, allows an unauthentic

A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attac

ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing

maddy is a composable, all-in-one mail server. Starting with version 0.2.0 and prior to version 0.6.3, maddy allows a fu

E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user

PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key `PanIndex` is used

github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workfl

The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access se

Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which cou

The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the devi

The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This

Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to u

The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could al

Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to c

The Akuvox E11 Media Access Control (MAC) address, a primary identifier, combined with the Akuvox E11 IP address, could

Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox

The Akuvox E11 secure shell (SSH) server is enabled by default and can be accessed by the root user. This password canno

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't

PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.

Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information.

Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst. This vulnerability all

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a cr

CodeIgniter Shield provides authentication and authorization for the CodeIgniter 4 PHP framework. An improper implementa

A vulnerability classified as critical was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0

STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker t

A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c.. The array offsets_to_Name

PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site reques

The Namaste! LMS WordPress plugin before 2.6 does not sanitize and escape some of its settings, which could allow high-p

The Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some