CVE-2020-6252

Under certain conditions SAP Adaptive Server Enterprise Cockpit, version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact syst...

Information disclosure

Under certain conditions SAP Adaptive Server Enterprise Cockpit, version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact syst...

Code injection

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

CVE-2020-6252

Under certain conditions SAP Adaptive Server Enterprise Cockpit, version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact syst...

Information disclosure

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop t...

CVE-2020-6253

Under certain conditions, SAP Adaptive Server Enterprise Web Services, versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL...

CVE-2020-6252

CVE-2020-6252 affects SAP Adaptive Server Enterprise (ASE) Cockpit on Windows installations of ASE 16. The vulnerability arises because the login password for the helper SQL Anywhere database (used by Cockpit) is stored in a configuration file readable by any local Windows user, enabling an attac...

CVE-2020-6250

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop t...

CVE-2020-6248

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

KLA11535 An elevation of privilege vulnerability in Microsoft Developer Tools

An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1211 Related products Microsoft-Visual-Studio CVE list CVE-2019-1211 warning KB list Solution Install necessary updates...

Oracle Retail Customer Management and Segmentation Foundation Unauthorized Access Vulnerability

Oracle Retail Customer Management and Segmentation Foundation is a retail customer management product. An unspecified vulnerability exists in the Promotions component of Oracle Retail Customer Management and Segmentation Foundation 16.0. An attacker can exploit this vulnerability to gain...

McAfee Total Protection CVE-2019-3648 Local Privilege Escalation Vulnerability

Description Multiple McAfee products are prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. McAfee Total Protection MTP version 16.0.R22 and prior are vulnerable. Technologies Affected McAfee Total Protection 16.0.R17 McAfee Total...

McAfee Total Protection MTP Free Antivirus Trial Code Issue Vulnerability

McAfee Total Protection MTP is a suite of antivirus software from McAfee, Inc.MTP Free Antivirus Trial is its free trial version. A code issue vulnerability exists in the Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and prior versions. An attacker could...

Design/Logic Flaw

LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell patches to fix this are at https://review.lineageos.org/c/LineageOS/androidsystemcore/+/234800,...

CVE-2019-1010221

The CVE-2019-1010221 entry concerns LineageOS 16.0 and earlier where an Incorrect Access Control allows adb root state to be set from a normal adb shell. The underlying issue is that the property used to enable root in adb (service.adb.root) can be manipulated when adb is enabled, enabling an att...

CVE-2019-7105

CVE-2019-7105 is a path-traversal vulnerability in Adobe XD versions 16.0 and earlier that could allow arbitrary code execution. Multiple sources (NVD, Red Hat, CNVD, Nessus plugin) corroborate the same issue and impact. The root cause is a path traversal flaw in XD that could be exploited to run...

CVE-2018-6341

React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x, 16.2.x, 16.3.x, and 16.4.x. It was...

SAP Adaptive Server Enterprise Information Disclosure Vulnerability (CNVD-2019-05056)

SAP Adaptive Server Enterprise ASE is a relational database management system from SAP. The system can be used in data-intensive environments , and has a fast , stable performance , etc. Backup Server is one of the backup server . An information disclosure vulnerability exists in the Backup Serve...

CVE-2018-2457

Under certain conditions SAP Adaptive Server Enterprise, version 16.0, allows some privileged users to access information which would otherwise be restricted...

CVE-2018-2457

SAP Adaptive Server Enterprise (ASE) 16.0 is cited in connected sources as having an unauthorized access vulnerability that could allow some privileged users to access information that should be restricted. The CNVD entry for SAP ASE 16.0 confirms an unauthorized access flaw; however, the provide...