Code injection

codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields...

PT-2020-10611

Name of the Vulnerable Software and Affected Versions codeBeamer versions prior to 9.5.0-RC3 Description The issue is related to the ability to execute custom Java code and access the Java class loader via computed fields. This is due to improper restrictions in the software. Recommendations For...

CVE-2019-20635: Use of Externally-Controlled Input to Select Classes or Code

codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields...

Odoo Access Control Error Vulnerability (CNVD-2020-04404)

Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. An access control...

CVE-2019-11780

Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation...

CVE-2019-11780

Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation...

UBUNTU-CVE-2019-11780

Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation...

PT-2019-4511

Name of the Vulnerable Software and Affected Versions Odoo Community version 13.0 Odoo Enterprise version 13.0 Description The issue is related to improper access control in the computed fields system of the Odoo framework, allowing remote authenticated attackers to access sensitive information v...

PT-2004-2528 · Ibm · Ibm Domino +1

Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions prior to R6 IBM Domino versions prior to R6 Description: A cross-site scripting XSS issue allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of computed for...