Most Common Issues with Salesforce Connected App in Veeam Data Cloud for Salesforce

Purpose This article documents the changes to Connected App usage in Veeam Data Cloud for Salesforce resulting from Salesforce's restriction of uninstalled connected apps, effective Autumn 2025. It provides guidance on authorization requirements, common connection errors, and necessary permission...

EUVD-2020-11044

Malware in sbrugna...

CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1=10"...

ballanautumnfestival.com.au Improper Access Control vulnerability OBB-3757472

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

malvernautumn.co.uk Cross Site Scripting vulnerability OBB-2935064

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

File Upload Vulnerability in Heartland OA 2021 Autumn Solid Edition (CNVD-2021-89119)

Mindtone OA is an oa office tool equipped with AI artificial intelligence. A file upload vulnerability exists in Heartland OA 2021 Autumn Edition, which can be exploited by attackers to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-88667)

HeartTone OA is an oa office tool equipped with AI artificial intelligence. Heart to OA 2021 Autumn real version there is a file upload vulnerability, attackers can use the vulnerability to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-88619)

HeartTone OA is an oa office tool equipped with AI artificial intelligence. Heart to OA 2021 Autumn real version there is a file upload vulnerability, attackers can use the vulnerability to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-86865)

HeartTone OA is a multifunctional intelligent office application. Heart to Heart OA 2021 Autumn Real Edition has a file upload vulnerability, which can be exploited by attackers to gain control of the server...

CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

Improper access control

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

CVE-2020-19137

CVE-2020-19137 affects Autumn v1.0.4 and earlier. The root cause is incorrect access control in the Autumn CMS, enabling remote attackers to obtain clear-text login credentials via the endpoint autumn-cms/user/getAllUser/?page=1&limit=10. Provided connected documents confirm the specific vulnerab...

CVE-2020-19137

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

CVE-2020-19137: Cleartext Storage of Sensitive Information

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10"...

Autumn 安全漏洞

Autumn is a collection of Web subsystems designed to provide general purpose Web system solutions. A security vulnerability exists in Autumn v1.0.4 and earlier versions that stems from incorrect access control. The vulnerability allows remote attackers to obtain plaintext login credentials via th...

SQL Injection Vulnerability in Pa***.aspx Page of Far Autumn Medical Online Exam System

Far Autumn Medical Online Exam System uses common test bank management software to conduct online medical knowledge exams. SQL injection vulnerability exists in the Pa.aspx page of the Far Autumn Medical Online Exam System, which can be exploited by attackers to obtain sensitive information from...

Far Autumn Medical Training Enrollment System v1.0 File Upload Vulnerability in Frontend

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

Security fix for the ALT Linux 8 package samba version 4.7.12-alt1

4.7.12-alt1 built Nov. 29, 2018 Evgeny Sinelnikov in task 216960 Nov. 27, 2018 Evgeny Sinelnikov - Update to autumn security release - Clean test module of thirdparty/iso8601 and subunit modules - Security fixes: + CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD Internal DNS...

What's New in Performance

One of the things I like most about living in New England is the changing of seasons. I find myself looking forward, thinking about what's exciting about the next one. Each season offers something unique and special, and if you're ambitious enough to try new things, a variety of new opportunities...