Advisories · Weakness
CWE-749.
Every Advisory and CVE whose sources give the weakness CWE-749, newest first.
- CVSS 7.5 High
EisBaer Scada - CWE-749: Exposed Dangerous Method or Function
- EisBaer Scada v3.0.6433.1964
- CWE-749
- CVSS 7.5 High
Unauthenticated Remote Database Exfiltration
- PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH cashIT! - serving solutions.
- CWE-749
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Remote Code Execution
- PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH cashIT! - serving solutions.
- Code injection
- CWE-749
- CVSS 9.8 CriticalCritical · CVSS 9+
Softneta MedDream PACS Exposed Dangerous Method or Function
- Softneta MedDream PACS
- CWE-749
- CVSS 8.2 High
Unprotected WebView access in Govee Home App
- Govee Home
- CWE-749
- CVSS 7.6 High
Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.
- Zoom Video Communications, Inc. Zoom SDK's
- CWE-749
- CVSS 7.8 High
Keysight Geolocation Server Exposed Dangerous Method or Function
- Keysight Technologies N6845A Geolocation Server
- CWE-749
- CVSS 6.8 Medium
Siemens CP-8031 MASTER MODULE: A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05)…
- Siemens CP-8031 MASTER MODULE
- Siemens CP-8050 MASTER MODULE
- CWE-749
- CVSS 5.3 Medium
In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
- JetBrains TeamCity
- CWE-749
- CVSS 7.8 High
PDF-XChange Editor: This vulnerability allows remote attackers to execute arbitrary code on affected…
- PDF-XChange Editor
- CWE-749
- CVSS 7.5 High
REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified.
- kernel
- CWE-749
- CVSS 6.6 Medium
xwiki contains Exposed Dangerous Method or Function
- CWE-749
>=14.3-rc-1, <14.4.6 || >=14.5, <14.9-rc-1 · fixed in 14.4.6, 14.9-rc-1
GHSA-8692-g6g9-gm5p · CVE-2023-26478 - CVSS 8.6 High
Exposed Dangerous Method or Function in qmpaas/leadshop
- qmpaas/leadshop
- CWE-749
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Cobbler has Exposed Dangerous Method or Function
- CWE-749
>=2.6.0, <3.0.0 · fixed in 3.0.0
GHSA-8787-63px-3m23 · CVE-2018-10931 - CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV
Improper Input Validation in Apache Struts
- CWE-20
- CWE-749
<1.2.9 · fixed in 1.2.9
GHSA-7qwv-cwgj-c8rj · CVE-2006-1547 - CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Commvault CommCell: This vulnerability allows remote attackers to execute arbitrary code on affected…
- Commvault CommCell
- CWE-749
- CVSS 5.3 Medium
HTTP PUT & DELETE Methods Enabled
- SolarWinds Web Help Desk
- CWE-749
-
Ivanti Avalanche: An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using…
- Ivanti Avalanche
- CWE-749
- CVSS 7.5 High
IpTime C200 IP camera remote code execution vulnerability
- EFM networks & multimedia ipTIME C200 IP Camera
- CWE-749
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Missing Authentication for Critical Function in RTRR Server in HBS3
- QNAP Systems Inc. HBS 3
- Broken access control
- Authentication bypass
- CVSS 9.0 CriticalCritical · CVSS 9+
Stored cross-site scripting vulnerability in QES
- QNAP Systems Inc. QES
- Cross-site scripting (XSS)
- CWE-749
- CVSS 6.5 Medium
Crash while handling internal Javascript exception types
- MongoDB Inc. MongoDB Server
- CWE-749
-
AMD VBIOS Flash Tool SDK: A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK…
- AMD VBIOS Flash Tool SDK
- CWE-749
-
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks.
- AMD extension to Linux "hwmon" for Zen1 platforms
- CWE-749
- CVSS 5.5 Medium
Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-749
-
AMD Ryzen Master: A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any…
- AMD Ryzen Master
- CWE-749
- CVSS 6.7 Medium
Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities
- Cisco IOS XE Software
- CWE-749
- CVSS 6.7 Medium
Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities
- Cisco IOS XE Software
- CWE-749
- CVSS 8.8 High
Marvell QConvergeConsole: This vulnerability allows remote attackers to execute arbitrary code on affected…
- Marvell QConvergeConsole
- CWE-749
- CVSS 6.5 Medium
Parallels Desktop: This vulnerability allows local attackers to disclose information on affected…
- Parallels Desktop
- CWE-749
-
Citrix XenMobile Server: Improper access control in Citrix XenMobile Server 10.12 before RP3…
- Citrix XenMobile Server
- CWE-749
- CVSS 9.8 CriticalCritical · CVSS 9+
CentOS Web Panel: This vulnerability allows remote attackers to write arbitrary files on affected…
- CentOS Web Panel
- CWE-749
-
RVD#2550: Terminate Critical Services in KUKA controller KR C4
- KUKA Roboter GmbH KR3R540, KRC4, KSS8.5.7HF1, Win7_Embedded
- CWE-749
- CVSS 9.9 CriticalCritical · CVSS 9+
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0).
- Siemens Control Center Server (CCS)
- CWE-749
-
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl.
- Siemens AG SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
- Siemens AG SIMATIC S7-1200 CPU family < V4.x (incl. SIPLUS variants)
- CWE-749
-
Siemens AG SIMATIC PCS 7 V8.0 and earlier: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions)…
- Siemens AG SIMATIC PCS 7 V8.0 and earlier
- Siemens AG SIMATIC PCS 7 V8.1
- CWE-749
- CVSS 9.0 CriticalCritical · CVSS 9+
Talos Pixar Renderman: A local privilege escalation vulnerability exists in the Mac OS X version of Pixar…
- Talos Pixar Renderman
- CWE-749
- CVSS 6.2 Medium
Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function
- Medtronic 24950 MyCareLink Monitor
- Medtronic 24952 MyCareLink Monitor
- CWE-749
-
Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance.
- GitLab Community Edition & GitLab Enterprise Edition 8.13.0, 8.13.0-ee, 8.13.1, 8.13.1-ee, 8.13.2, 8.13.2-ee, 8.13.3, 8.13.3-ee, 8.13.4, 8.13.4-ee, 8.13.5, 8.13.5-ee, 8.13.6, 8.13.6-ee, 8.13.7, 8.14.0, 8.14.0-ee, 8.14.1
- CWE-749
- CVSS 9.1 CriticalCritical · CVSS 9+
Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function
- Beckhoff Embedded PC Images
- Beckhoff TwinCAT Components featuring Automation Device Specification (ADS) communication
- CWE-749
- CVSS 9.3 HighCritical · CVSS 9+
ICONICS GENESIS32 Exposed Dangerous Method or Function
- ICONICS GENESIS32
- CWE-749
- CVSS 5.9 MediumCritical · KEVKEV · ransomware
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for…
- CWE-749
- CVSS 3.7 LowCritical · KEVKEV · ransomware
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for t…
- CWE-749