Filtered by vendor Cdata Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-31851 1 Cdata 1 Sync 2024-11-21 8.6 High
A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.
CVE-2023-24243 1 Cdata 1 Arc 2024-11-21 7.5 High
CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).
CVE-2020-29056 2 Cdata, Cdatatec 57 Fd1104 Firmware, 72408a, 72408a Firmware and 54 more 2024-11-21 9.8 Critical
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. One can escape from a shell and acquire root privileges by leveraging the TFTP download configuration.