4D
Vendor
4d
16
CVEs
0
On KEV
0
New 30D
Products
WE7.5
Webstar
4d
9 CVEs0 on KEV0 new
SE7.8
Server
4d
4 CVEs0 on KEV0 new
4D7.8
4d
4d
1 CVEs0 on KEV0 new
4S7.5
4D Server
4D
1 CVEs0 on KEV0 new
WH–
Webstar Http Server
4d
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-39847 | 4S 4D Server 4D | 7.5 | Apr 30 | Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Server SOAP |
| CVE-2023-4770 | SE Server 4d | 7.8 | Nov 30 | An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218 |
| CVE-2023-30223 | SE Server 4d | 7.5 | Jun 16 | A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform… |
| CVE-2023-30222 | SE Server 4d | 7.5 | Jun 16 | An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping |
| CVE-2005-3143 | WE Webstar 4d | – | Oct 5 | Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP clients on Mac OS X 10.4 Mail 2 |
| CVE-2005-1507 | WE Webstar 4d | – | May 11 | Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL |
| CVE-2004-0112 | WE Webstar 4d | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… |
| CVE-2004-0079 | WE Webstar 4d | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… |
| CVE-2004-0081 | WE Webstar 4d | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… |
| CVE-2004-0698 | WE Webstar 4d | – | Jul 27 | 4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack |
| CVE-2004-0697 | WE Webstar 4d | – | Jul 27 | Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information |
| CVE-2004-0696 | WE Webstar 4d | – | Jul 27 | The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character |
| CVE-2004-0695 | WE Webstar 4d | – | Jul 27 | Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command |
| CVE-2000-0290 | WH Webstar Http Server 4d | – | Mar 31 | Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request |