KB3045318 - MS15-058: Description of the security update for SQL Server 2012 SP1 GDR: July 14, 2015

KB3045318 - MS15-058: Description of the security update for SQL Server 2012 SP1 GDR: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed to execute a...

SAP Data Services Cross-Site Request Forgery Vulnerability

SAP Data Services is a set of enterprise data management software from Germany's SAP. The software supports the processing of structured and unstructured data, and supports data conversion, cleaning and matching functions. A cross-site request forgery vulnerability exists in SAP Data Services. An...

CVE-2020-6206

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery...

Cross site request forgery (csrf)

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery...

CVE-2020-6206

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery...

CVE-2020-6206

CVE-2020-6206 affects SAP Cloud Platform Integration for Data Services 1.0. The issue is that user inputs can be reflected as error or warning messages, which could mislead victims into following malicious instructions and enable Cross-Site Request Forgery. The connected records confirm this CSRF...

jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes

A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using blaze classes. An attacker could use this flaw to execute arbitrary code...

The vulnerability of the User Data Services (UDS) software interface of the Cisco Unified Communications Manager (Unified CM) platform allows a perpetrator to trigger a service failure.

The vulnerability of the User Data Services UDS software interface of the Cisco Unified Communications Manager Unified CM platform is related to insufficient validation of entered data. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially...

CVE-2019-1837

A vulnerability in the User Data Services UDS API of Cisco Unified Communications Manager Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the management GUI. The vulnerability is due to improper validation of input parameters in the UDS API...

CVE-2019-1837 Cisco Unified Communications Manager Denial of Service Vulnerability

A vulnerability in the User Data Services UDS API of Cisco Unified Communications Manager Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the management GUI. The vulnerability is due to improper validation of input parameters in the UDS API...

SAP Data Services Cross-Site Scripting Vulnerability

SAP Data Services is a set of enterprise data management software from Germany's SAP. The software supports the processing of structured and unstructured data, and supports data conversion, cleaning and matching functions. A cross-site scripting vulnerability in Impact and Lineage Analysis in SAP...

CVE-2018-2466

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

CVE-2018-2466

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

Cross site scripting

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

CVE-2018-2466

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

CVE-2018-2466

CVE-2018-2466 affects SAP Data Services (Impact and Lineage Analysis) v4.2, where the management console fails to sufficiently validate user-controlled inputs, enabling a Cross-Site Scripting (XSS) vulnerability. Documented impact indicates browser-level script execution potential when malicious ...

The vulnerability of the Wireless Data Service module of the Qualcomm Data Services component in the Android operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Wireless Data Service module of the Qualcomm Data Services operating system in Android is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

The vulnerability of the Qualcomm Data Services component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm Data Services’ Android operating system stems from an overflow in memory buffers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm Data Services component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm Data Services’ Android operating system stems from a buffer overflow issue during the verification of the IMS SIP user name. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities vulnerability

Summary IBM Security Guardium has addressed the following vulnerabilities Vulnerability Details CVEID: CVE-2012-3324 DESCRIPTION: IBM DB2, when running on Microsft Windows, could allow a remote authenticated attacker to traverse directories on the system, caused by improper validation of...