Show filters
66 Total Results
Displaying 31-40 of 66
Sort by:
Attacker Value
Unknown

CVE-2021-32959

Disclosure Date: September 23, 2021 (last updated February 23, 2025)
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06
Attacker Value
Unknown

CVE-2021-32963

Disclosure Date: August 19, 2021 (last updated February 23, 2025)
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10
Attacker Value
Unknown

CVE-2021-32999

Disclosure Date: August 19, 2021 (last updated February 23, 2025)
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01
Attacker Value
Unknown

CVE-2021-32971

Disclosure Date: August 19, 2021 (last updated February 23, 2025)
Null pointer dereference in SuiteLink server while processing command 0x07
Attacker Value
Unknown

CVE-2021-32987

Disclosure Date: August 19, 2021 (last updated February 23, 2025)
Null pointer dereference in SuiteLink server while processing command 0x0b
Attacker Value
Unknown

CVE-2021-32979

Disclosure Date: August 19, 2021 (last updated February 23, 2025)
Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a
Attacker Value
Unknown

CVE-2021-32942

Disclosure Date: June 08, 2021 (last updated February 22, 2025)
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.
Attacker Value
Unknown

CVE-2020-13505

Disclosure Date: September 24, 2020 (last updated February 22, 2025)
Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.
Attacker Value
Unknown

CVE-2020-13504

Disclosure Date: September 24, 2020 (last updated February 22, 2025)
Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.
Attacker Value
Unknown

CVE-2020-13499

Disclosure Date: September 24, 2020 (last updated February 22, 2025)
An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstancePath in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.