Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

4d server 17 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-30222
An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and previous versions allows malicious users to retrieve password hashes for all users via eavesdropping.
4d Server 184d Server 194d Server 17
7.5
CVSSv3
CVE-2023-30223
A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and previous versions allows malicious users to send crafted TCP packets containing requests to perform arbitrary actions.
4d Server 184d Server 194d Server 17
NA
CVE-2004-0112
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshak...
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
NA
CVE-2004-0081
OpenSSL 0.9.6 prior to 0.9.6d does not properly handle unknown message types, which allows remote malicious users to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1 \\(3.005\\)Cisco Firewall Services ModuleCisco Firewall Services Module 1.1.2Symantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Hp Aaa ServerCisco Ciscoworks Common Management Foundation 2.1Cisco Ciscoworks Common Services 2.2Avaya Sg208 4.4Avaya Sg5 4.2Avaya Sg5 4.3Freebsd Freebsd 5.1Hp Hp-ux 8.05Openbsd Openbsd 3.3Redhat Linux 8.0Sco Openserver 5.0.6Avaya Sg203 4.4Avaya Sg208Freebsd Freebsd 4.8
7.5
CVSSv3
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
10
CVSSv3
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
NA
CVE_2022_40684
Official Writeup - Simple CTF 2.0 Created: April 23, 2024 7:50 PM Today I completed an other room on TryHackMe with a simple file-upload vulnerability which I built. I have tried for dancing around this whole CTF machine and getting a lot of walls of challenges in the end it co...
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895blind SQL injectionCVE-2024-5064CVE-2023-52677CVE-2023-52682CVE-2024-30051CVE-2024-35849remote attackersremote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook