740 matches found
IBM DB2 Connect 9.7 < 9.7.1100.352 / 10.5 < 10.5.1100.2866 / 11.1 < 11.1.4050.859 / 11.5 < 11.5.5000.1587 DoS (Windows)
IBM DB2 for Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to cause a denial of service inside the 'DB2 Management Service'. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
CVE-2020-4897
IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM...
CVE-2020-21378
SQL injection vulnerability in SeaCMS 10.1 2020.02.08 via the id parameter in an edit action to adminmembersgroup.php...
Sql injection
SQL injection vulnerability in SeaCMS 10.1 2020.02.08 via the id parameter in an edit action to adminmembersgroup.php...
CVE-2020-21378
SQL injection vulnerability in SeaCMS 10.1 2020.02.08 via the id parameter in an edit action to adminmembersgroup.php...
Important: Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update
An update for the mariadb:10.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
SAP Disclosure Management Code Issue Vulnerability (CNVD-2020-74927)
SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1 that stems fro...
CVE-2020-26513
An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The ReqIF XML data, used by the codebeamer ALM application to import projects, is parsed by insecurely configured software components, which can be abused for XML External Entity Attacks...
[SECURITY] [DLA 2409-1] mariadb-10.1 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2409-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 21, 2020 https://wiki.debian.org/LTS -...
DLA-2409-1 mariadb-10.1 - security update
Bulletin has no description...
Unspecified Vulnerability in Foxit Reader and PhantomPDF (CNVD-2020-59789)
Foxit Reader and PhantomPDF are China Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1. No details of the vulnerabilities are available at this time...
Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-57568)
Reader is a set of PDF document reader software . Foxit Reader is a PDF document reader . V8 is one of the open source JavaScript engine . mPDF is a use of PHP to write for the conversion of HTML into PDF files library . A buffer overflow vulnerability exists in Foxit Reader and PhantomPDF versio...
CVE-2020-26535
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation and read access violation...
CVE-2020-26536
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document...
Design/Logic Flaw
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V in the Additional Action and Field dictionaries, a use-after-free can occur with resultant remote code execution or an information leak...
HCL Technologies Campaign Cross-Site Scripting Vulnerability
HCL Technologies Campaign is a suite of management solutions from HCL Technologies India to help marketers design, execute, measure and optimize marketing campaigns. A cross-site scripting vulnerability exists in HCL Technologies Campaign versions 10.1.x, 11.0.1 and 11.1.0.x. The vulnerability ca...
Azure File Sync Agent v10.1 Release – June 2020 (KB4522411)
Update for Azure File Sync agent version 10.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Unspecified Vulnerability in SAP Disclosure Management
SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1 that stems fro...