CVE-2018-16871

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to...

CVE-2019-0269

SAP BusinessObjects Business Intelligence Platform BI Workspace, versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0269

CVE-2019-0269 describes a cross-site scripting vulnerability in SAP BusinessObjects BI Platform (BI Workspace) affecting versions 4.10 and 4.20 . It results from insufficient encoding of user-controlled inputs , enabling potential execution of arbitrary script in a user’s browser within the affec...

CVE-2019-0262

SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0262

SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting XSS vulnerability...

openSUSE Security Update : mozilla-nspr and mozilla-nss (openSUSE-2018-1618)

This update for mozilla-nss and mozilla-nspr fixes the following issues : Issues fixed in mozilla-nss : - Update to NSS 3.40.1 bsc1119105 - CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack bsc1119069 - CVE-2018-12384: Fixed an issue in the SSL handshake. NSS respond...

Security update for mozilla-nspr and mozilla-nss (moderate)

This update for mozilla-nss and mozilla-nspr fixes the following issues: Issues fixed in mozilla-nss: - Update to NSS 3.40.1 bsc1119105 - CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack bsc1119069 - CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded...

PT-2018-2968 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.20 Description: The issue is related to errors in synchronization when using a shared resource, specifically a race condition in the smp task timedout and smp task done functions in the drivers/scsi/libsas/sas...

Security Advisory 0037

Security Advisory 0037 . CSAF PDF Date: August 14th, 2018 Last Updated: March 25th, 2019 Version: 1.1 Revision | Date | Changes ---|---|--- 1.0 | August 14, 2018 | Initial Release 1.1 | March 25, 2019 | Updated with Remediated versions The CVE-ID tracking this issue is CVE-2018-5391 CVSS v2: 7.8...

CVE-2018-2431

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2018-2431

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, contains an XSS vulnerability caused by insufficient encoding of user-controlled inputs. The root cause is improper encoding in the affected web-facing components, enabling cross-site scripting. The connected documents do no...

Arista EOS Mlag agent denial of service vulnerability

Arista EOS is a suite of modular operating systems from Arista Networks, Inc. that provide the foundation platform for next-generation data center and cloud networking business requirements. mlag agent is one of the Mlag agents. A security vulnerability exists in the Mlag agent in Arista EOS...

CVE-2018-5255

The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...

CVE-2018-2370

Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...

Code injection

Denial of Service DOS in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could allow an attacker to prevent legitimate users from accessing a service...

CVE-2017-16683

Denial of Service DOS in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could allow an attacker to prevent legitimate users from accessing a service...

CVE-2017-16681

Cross-Site Scripting XSS vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, 4.30, as user controlled inputs are not sufficiently encoded...

BoxBilling 4.20 Cross Site Scripting

======================================================================== | Title : BoxBilling 4.20 cross site scripting Exploits | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 4.20 | Vendor :...

phpVibe 4.20 Stored XSS Vulnerability

Exploit for php platform in category web applications phpVibe The vulnerability exists because the user input is not properly sanitized and this can lead to malicious code injection that will be executed on the target’s browser -- Proof of Concept -- 1. The attacker posts a new comment which...

phpVibe 4.20 - Persistent Cross-Site Scripting

phpVibe 4.20 - Persistent Cross-Site Scripting phpVibe The vulnerability exists because the user input is not properly sanitized and this can lead to malicious code injection that will be executed on the target’s browser -- Proof of Concept -- 1. The attacker posts a new comment which contains ou...