CVE-2022-22530

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being...

CVE-2021-31381: Exposure of Sensitive Information to an Unauthorized Actor

A configuration weakness in the JBoss Application Server AppSvr component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete files which may allow the attacker to disrupt the integrity and availability of the system...

CVE-2020-2039

CVE-2020-2039 affects PAN-OS management web interface across multiple releases (8.1 < 8.1.16; 9.0 < 9.0.10; 9.1 < 9.1.4; 10.0

PT-2019-5034

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient input validation and policy enforcement in Google Chrome, allowing a remote attacker to bypass site isolation. This can be achieved by using a...

Denial of Service Vulnerability in Multiple Moxa Nport Products (CNVD-2017-34490)

Moxa NPort 5110, 5130 and 5150 are Moxa's serial communication servers for connecting industrial serial devices to a network. A denial of service vulnerability exists in several Moxa Nport products, which could allow an attacker to launch a denial of service attack by injecting packets that could...

CVE-2017-16719

An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to inject packets that could potentially disrupt the availabili...

CVE-2017-16719

An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to inject packets that could potentially disrupt the availabili...

Rockwell Automation PanelView Plus Security Bypass Vulnerability

Rockwell Automation PanelView Plus is a programmable graphical interface terminal from Rockwell Automation. A security vulnerability exists in the Rockwell Automation PanelView Plus 6 700-1500 that originates from the program failing to perform authentication checks. A remote attacker could explo...

DEBIAN-CVE-2016-3498

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX...

OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911...

Gentoo Linux Remote Compromise

The multiple vulnerabilities in the libarchive package up to version 2.2.4 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Gentoo Linux Data Compromise

The multiple vulnerability of the libpcre package up to version 7.6-r1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Red Hat Enterprise Linux Data Compromise

The flac-1.1.2 package has multiple vulnerabilities in the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Gentoo Linux Data Compromise

The vulnerability of the curl package up to version 7.19.4 in the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

PT-2015-1120 · Oracle +2 · Mysql Server +2

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.6.22 and earlier Description: The issue allows remote authenticated users to affect the availability of data through unknown vectors related to the XA subcomponent. This can potentially lead to disruptions in...

PT-2015-1706 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.42 and earlier Oracle MySQL Server versions 5.6.23 and earlier Description: The issue is related to errors in the code of the Server: Optimizer component of the MySQL database management system. It allows a...

PT-2011-1082 · Suse +2 · Kernel-Kdumppae +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.0 kernel-kdumppae affected versions not specified Description: The issue allows local users to cause a denial of service, resulting in a system hang, via a specific system call. Additionally, multiple...

PT-2001-1041 · Netfilter · Iptables

Name of the Vulnerable Software and Affected Versions: iptables versions prior to 1.2.4 iptables-1.2.4 iptables-ipv6-1.2.4 Description: The issue affects the iptables package, potentially leading to an information leak due to iptables generating different responses than specified by the...

PT-2006-7604 · Linux +1 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: usbvision-kmp-default affected versions not specified usbvision-kmp-xenpae affected versions not specified usbvision-kmp-bigsmp affected versions not specified usbvision-kmp-xen affected versions not specified usbvision-kmp-debug affected...