Lucene search
K

29 matches found

CNNVD
CNNVD
added 2025/12/03 12:0 a.m.1 views

Plugin Alliance Aquarius Desktop 安全漏洞

Plugin Alliance Aquarius Desktop is an audio plugin management software from Plugin Alliance, Inc. A security vulnerability exists in Plugin Alliance Aquarius Desktop version 3.0.069, which stems from the Supported Data Archiving feature not properly handling symbolic links, which could lead to...

7.7CVSS6.7AI score0.00029EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-8706

Malware in sbrugna...

8.8CVSS8.6AI score0.00476EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-32166

Malicious code in bioql PyPI...

7.5CVSS7.9AI score0.00702EPSS
Exploits0References2
Redos
Redos
added 2025/08/29 12:0 a.m.3 views

ROS-20250829-06

Vault Enterprise and Vault Community Edition enterprise data archiving platforms have a vulnerability due to incorrect privilege assignment. Edition is related to incorrect privilege assignment. Exploitation of the vulnerability could allow an attacker acting remotely to escalate privileges to ro...

7.2CVSS7.3AI score0.00158EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/07/10 1:30 a.m.4 views

CVE-2025-42966

SAP NetWeaver XML Data Archiving Service allows an authenticated attacker with administrative privileges to exploit an insecure Java deserialization vulnerability by sending a specially crafted serialized Java object. This could lead to high impact on confidentiality, integrity, and availability ...

9.1CVSS7.1AI score0.00621EPSS
Exploits0References1
CVE
CVE
added 2025/07/08 12:36 a.m.24 views

CVE-2025-42966

CVE-2025-42966 affects SAP NetWeaver XML Data Archiving Service. The vulnerability is an insecure Java deserialization flaw exploitable by an authenticated attacker with administrative privileges via a crafted serialized Java object. This can impact confidentiality, integrity, and availability of...

9.1CVSS6.4AI score0.00621EPSS
Exploits0References2
Redos
Redos
added 2025/07/01 12:0 a.m.3 views

ROS-20250630-02

The vulnerability of HashiCorp Vault and Vault Enterprise enterprise data archiving platforms is related to the fact that the validprincipals and defaultuser fields of the SSH secrets mechanism configuration are not are not set. Exploitation of the vulnerability could allow an attacker acting...

8.8CVSS7.9AI score0.00603EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 9:49 p.m.8 views

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

7.5CVSS7.3AI score0.00702EPSS
Exploits0References1
Redos
Redos
added 2024/10/28 12:0 a.m.8 views

ROS-20241028-01

Vulnerability in HashiCorp Vault and Vault Enterprise enterprise data archiving platforms is related to user enumeration when using the LDAP authentication method. Exploitation The vulnerability could allow an attacker acting remotely to impact the integrity of the systems...

5.3CVSS6.9AI score0.00975EPSS
Exploits0
Redos
Redos
added 2024/09/02 12:0 a.m.11 views

ROS-20240902-14

Vulnerability of HashiCorp Vault and Vault Enterprise enterprise data archiving platforms is related to incorrect processing of requests coming from unauthorized IP addresses. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service...

7.5CVSS6.9AI score0.00396EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2022/04/12 5:15 p.m.1 views

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

7.5CVSS5.8AI score0.00702EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2022/04/12 5:15 p.m.14 views

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

7.5CVSS0.00702EPSS
Exploits0References2
OSV
OSV
added 2022/04/12 5:15 p.m.1 views

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

7.5CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2022/04/12 5:15 p.m.16 views

Design/Logic Flaw

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

5CVSS7.8AI score0.00702EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/12 4:11 p.m.14 views

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

8AI score0.00702EPSS
Exploits0References2
CVE
CVE
added 2022/04/12 4:11 p.m.82 views

CVE-2022-27669

CVE-2022-27669 concerns SAP NetWeaver Application Server for Java 7.50, where an unauthenticated user can abuse the XML Data Archiving Service due to a lack of authentication checks, potentially causing privilege escalation. Multiple connected sources (Red Hat, CNVD, CVE listing, and NCSC overvie...

7.5CVSS7.8AI score0.00702EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.2 views

SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP Germany. SAP NetWeaver Application Server elevation of privilege vulnerability, which stems from a lack of authentication checks in the XML data archiving service, can be exploited by an attacker to cause an elevation of privilege...

7.5CVSS7.8AI score0.00702EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/04/04 12:0 a.m.3 views

The vulnerability of the NVBUBackup request handler’s software for data archiving and restoration by NetVault Backup allows a perpetrator to execute arbitrary code.

The vulnerability of the NVBUBackup request handler in software for data archiving and restoration by NetVault Backup is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.8CVSS6.1AI score0.14875EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/03/28 12:0 a.m.1 views

The vulnerability of the request handler of the NVBUSourceDeviceSet Get function in the software for data archiving and restoration by NetVault Backup allows a attacker to execute arbitrary code.

The vulnerability of the NVBUSourceDeviceSet Get request handler in software for data archiving and restoration in NetVault Backup is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

9.8CVSS6AI score0.14875EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/03/28 12:0 a.m.3 views

The vulnerability of the NVBUBackup JobList processing component in the NetVault Backup software for data archiving and restoration allows a attacker to execute arbitrary code.

The vulnerability of the NVBUBackup JobList processing component in NetVault Backup software for data archiving and restoration is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9.8CVSS6AI score0.14875EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder