SecurityManageFramwork

SecurityManageFramwork-SeMF README English | 中文 Introduction SEMF is a security management platform for enterprise intranet, which includes functions of asset management, vulnerability management, account management, knowledge base management and security scanning automation. It can be used for...

CVE-2026-18741

CVE-2026-18741 - Stored XSS in Worksuite SaaS About CVE-2026-18741 is a Stored XSS vulnerability affecting Worksuite SaaS versions prior to 6.0.14. The issue is located in the Asset Management module. User-controlled input can be stored through fields such as: Location Description The stored inpu...

IBM Maximo Asset Management Information Disclosure - XML External Entity Injection

IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...

ElectricEye

ElectricEye ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best...

CVE-2020-4463

IBM Maximo Asset Management is vulnerable to Information Disclosure via XXE Vulnerability CVE-2020-4463 IBM Maximo Asset Management is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...

CVE-2026-111583

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

EUVD-2026-111079

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

CVE-2026-111583 Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

CVE-2026-111583

The TeamViewer Full Client and Host for Windows prior to version 15.82 is vulnerable to Local Privilege Escalation (CWE-269) due to improper access control in the installer staging directory. During the installation of Advanced Asset Management , a local authenticated user with low privileges can...

PT-2026-126618

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

EUVD-2026-106714

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft component: Asset Management. The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-91466

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft component: Asset Management. The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-91466

A vulnerability exists in the Asset Management component of Oracle PeopleSoft Enterprise FIN Common Objects Argentina (version 9.1). A high privileged attacker with network access via HTTP can exploit this flaw, though the attack requires human interaction from another person. Successful exploita...

PT-2026-119991

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 Description An issue exists in the Asset Management component that allows a high privileged attacker with network access via HTTP to compromise the system...

Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from an issue in the Asset Management component. This vulnerability may allow attackers with elevated privileges and network access via HTTP to create, delete, or modify critical data ...

CVE-2026-89121 Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)

SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not...

CVE-2026-89121

SAP S/4HANA is vulnerable to a missing authorization check within the Linear Asset Management RAP Business Object . The root cause is the system's failure to perform sufficient instance-level authorization checks during certain modification operations on associated business object data. An attack...

bulwark

Una herramienta organizativa de gestión de activos y vulnerabilidades, con integración con Jira, diseñada para generar informes de seguridad de aplicaciones. Funcionalidades Gestión de vulnerabilidades para múltiples clientes Generación de informes de seguridad Integración con Jira Autorización...

CVE-2026-85015 Unlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allowing authenticated users with access to its asset-management feature Administrators by default, or Editors when a non-default Unlimited Elements fo...

CVE-2026-85015 Unlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allowing authenticated users with access to its asset-management feature Administrators by default, or Editors when a non-default Unlimited Elements fo...