SAP AS ABAP and SAP S4 HANA Improper Authentication Vulnerabilities

SAP Netweaver is a service-oriented, integrated application platform from SAP, which provides a development and runtime environment for SAP applications. The platform mainly provides development and operation environment for SAP applications.ABAP is an application server running in NetWeaver and...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-39512)

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-39510)

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

Google Chrome filesystem security bypass vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome filesystem. An attacker can exploit this vulnerability to bypass security restrictions...

SAP Fiori Launchpad Cross-Site Scripting Vulnerability

SAP Fiori is SAP's user experience UX design system for SAP applications, which provides designers and developers with a set of tools and guidelines to quickly develop applications for any platform, providing a consistent, innovative experience for creators and users.SAP Fiori Launchpad is the SA...

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Cross-Site Request Forgery Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. The Trend Micro InterScan Messaging Security Virtual Appliance IMSVA suffers from a cross-site request forgery vulnerability that arises from a web application that does...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-08823)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word. The vulnerability stems from the program not properly handling objects in memory. An attacker can exploit the vulnerability by...

Remote code execution

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

Microsoft Windows WER Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows WER. An attacker could...

Microsoft Windows KernelStream Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows KernelStream. The...

Remote Code Execution Vulnerability in Lilin NVR104 NTP Component

NVR104 is a stand-alone NVR recorder from LILING that supports up to 4 IP network cameras. A remote code execution vulnerability exists in the Lilin NVR104. An attacker can exploit the vulnerability to gain control of the NVR device...

Base3D Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. The security update addresses the vulnerability by correcting how the Base3D rendering engine...

Metinfo SQL Injection (CVE-2020-20800)

An SQL injection vulnerability exists in Metinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

EUVD-2020-12209

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...

U.S. Dept Of Defense: Reflected XSS on ███████

Summary: Reflected Cross site Scripting XSS on████leaving.html?url=%22%3E%3Cscript%3Ealertdocument.domain%3C/script%3E Steps To Reproduce: 1. Navigate to███leaving.html?url= 2. Enter a crafted XSS payload like "alert"xss by nagli" 3. Alert will pop :- █████████ How can the system be exploited wit...

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

CVE-2020-9229

Summary: CVE-2020-9229 is an information-disclosure vulnerability in Huawei FusionCompute 8.0.0. The issue stems from failing to protect certain information, allowing an attacker to obtain information. Affected product: Huawei FusionCompute 8.0.0 (VRM/CNA components mentioned in CNVD entry). Root...

Microsoft Excel Information Disclosure Vulnerability (CNVD-2020-49029)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to compromise a user's computer or data with the help of specially crafted files...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11036)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle memory objects and can be exploited by an attacker to execute code...