CVE Vulnerability Catalog

A vulnerability in the operating system allows a stack overflow by sending an ICMP ping to the device's own IPv4 address using the `net ping` command. This causes recursive processing of the packet in the network stack, leading to a stack overflow in the system work-queue stack.

A configuration file on the local file system of an Axis device had improper input validation, which could allow code execution and potentially lead to privilege escalation. The vulnerability can only be exploited if an attacker can log in to the Axis device using SSH.

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. Exploitation requires the Axis device to allow installation of unsigned ACAP applications and the attacker to convince the victim to install a malicious ACAP application.

An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

ACAP applications can gain elevated privileges due to improper input validation during installation, potentially leading to privilege escalation. The vulnerability can only be exploited if the Axis device allows installation of unsigned ACAP applications and an attacker convinces the victim to install a malicious ACAP application.

The configuration file of Zyxel WRE6505 v2 firmware V1.00(ABDV.3)C0 stores sensitive information insecurely. A local attacker with administrator privileges could download and decrypt a backup configuration file. The product is unsupported when assigned.

An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to brute-force the password and bypass authentication.

SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirect them to attacker-controlled sites, potentially exposing or altering sensitive information in the victim's browser. This results in a low impact on confidentiality and integrity, with no impact on availability.

SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminating their sessions, temporarily preventing access. The application itself cannot be compromised, resulting in low impact on availability, with no impact on data confidentiality or integrity.

W systemie SAP NetWeaver Application Server dla ABAP oraz platformy ABAP występuje podatność na wstrzykiwanie poleceń systemowych, która pozwala uwierzytelnionemu atakującemu z dostępem administracyjnym na wykonanie specjalnie przygotowanych poleceń powłoki na serwerze, omijając mechanizm logowania.

Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users could invoke a remote-enabled function module to perform table update operations. This vulnerability has a low impact on integrity with no impact on confidentiality and availability of the application.

Due to a missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the legitimate user from accessing the records, causing low impact on application availability.

Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in Business Server Pages), an authenticated attacker could access information that they are otherwise unauthorized to view. This vulnerability also enables the attacker to change the default settings and modify value fields, which will mislead risk evaluations and falsely lower assessed risk levels. This results in a low impact on the confidentiality and integrity of the data, with no impact on availability.

SAP Application Server ABAP for SAP NetWeaver and ABAP Platform contains a code injection vulnerability. An authenticated attacker could send specially crafted inputs that, when processed by the application, may be delivered to users subscribed to the channel and result in execution. Successful exploitation could enable the attacker to execute arbitrary code for other users, with low impact on integrity and no impact on confidentiality or availability.

In SAPUI5 (Search UI), an unauthenticated attacker can manipulate specific URL parameters in the Search UI to include malicious content. Successful exploitation may mislead victim users into clicking and accessing attacker-controlled pages rendered by the application. This vulnerability has a low impact on confidentiality with no effect on integrity and availability.

W wyniku podatności na odzwierciedlone ataki XSS w SAP NetWeaver Application Server ABAP, nieautoryzowany atakujący może stworzyć URL, który wykorzystuje niechroniony parametr URL do osadzenia złośliwego skryptu. Kliknięcie w taki link przez ofiarę prowadzi do wykonania złośliwej treści w kontekście przeglądarki ofiary.

Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform, an authenticated user could be tricked by an attacker into sending unintended requests to the web server. This has low impact on integrity and availability, with no impact on confidentiality.

In omec-project amf up to 2.1.1, the NGAP Message Handler component is affected by a memory corruption vulnerability. The attack can be launched remotely and a public exploit is available.

A vulnerability was detected in D-Link DIR-816 version 1.10CNB05_R1B011D88210. The function portForward is affected; manipulation of the ip_address argument results in command injection. The attack can be initiated remotely, and the exploit is now public and may be used.

A security vulnerability was detected in D-Link DIR-816 version 1.10CNB05_R1B011D88210. The function sub_445E7C of the file /goform/singlePortForward is affected; manipulation of the ip_address argument leads to command injection. The attack can be launched remotely, and the exploit has been publicly disclosed and may be used.