69 matches found
it-ausschreibung.de Cross Site Scripting vulnerability
Security Researcher metamorfosec Helped patch 1911 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting it-ausschreibung.de website and its users. Following...
CVE-2019-0405
SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure...
CVE-2019-0405
SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure...
CVE-2019-0404
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure...
CVE-2019-0403
SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection...
CVE-2019-0403
SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection...
Information disclosure
SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure...
Information disclosure
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure...
Command injection
SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection...
CVE-2019-0405
SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure...
CVE-2019-0404
CVE-2019-0404 affects SAP Enable Now prior to version 1911. The vulnerability stems from server error messages that reveal network configuration, causing information disclosure. The connected sources corroborate the affected product/version and the disclosure impact; they do not provide explicit ...
CVE-2019-0404
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure...
CVE-2019-0403
The CVE-2019-0403 case concerns SAP Enable Now (before version 1911). The available connected sources confirm a vulnerability in CSV handling where an attacker can input commands into CSV files, and those commands are executed when the file is opened, resulting in CSV Command Injection. The root ...
signia-pro.jp Cross Site Scripting vulnerability
Security Researcher metamorfosec Helped patch 1911 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting signia-pro.jp website and its users. Following...
CVE-2019-1911
Cisco Unified Communications Domain Manager (CUCDM) CLI vulnerability (CVE-2019-1911) allows an authenticated, local attacker to escape the restricted shell due to insufficient input validation of shell commands. Affected versions include CUCDM 11.5(3) PB3 and prior releases. Impact is elevated: ...
CVE-2018-1911
creationtimestamp| type| source ---|---|--- 2019-03-06 22:43:50+00:00| seen| https://t.me/cibsecurity/2896...
CVE-2017-1911
CVE-2017-1911 entry is rejected and does not represent an active vulnerability entry.
CVE-2015-1911
CVE-2015-1911 is an XSS vulnerability in IBM Sterling Selling and Fulfillment Suite components: Sterling Order Management 8.5 (before HF113), Sterling Selling and Fulfillment Foundation 9.0.0 (before FP92), and Sterling Field Sales 9.0 (before HF7). The IBM bulletin (IBM Security Bulletin) attrib...
CVE-2015-1911
Cross-site scripting XSS vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales SFS 9.0 before HF7 in IBM Sterling Selling and Fulfillment Suite allows remote attackers to inject arbitrary web script or...