Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/04/02 5:4 a.m.0 views

CVE-2025-67805

A non-default configuration in Sage DPW 202506004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installations and never available in Sage DPW Clou...

7.5CVSS5.9AI score0.00016EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/01 6:36 p.m.0 views

EUVD-2025-209164

A non-default configuration in Sage DPW 202506004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installations and never available in Sage DPW Clou...

5.9CVSS5.9AI score0.00016EPSS
Exploits0References3
NVD
NVD
added 2026/04/01 4:23 p.m.1 views

CVE-2025-67805

A non-default configuration in Sage DPW 202506004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installations and never available in Sage DPW Clou...

7.5CVSS0.00016EPSS
Exploits0References2
CVE
CVE
added 2026/04/01 12:0 a.m.3 views

CVE-2025-67805

Sage DPW 2025_06_004 contains a non-default configuration exposing unauthenticated access to diagnostic endpoints of the Database Monitor, allowing exposure of hashes and table names. The feature is disabled by default in all installations and never available in Sage DPW Cloud; Red Hat/NVD/ENISA/...

7.5CVSS5.9AI score0.00016EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/01 12:0 a.m.20 views

CVE-2025-67805

A non-default configuration in Sage DPW 202506004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installations and never available in Sage DPW Clou...

5.9CVSS0.00016EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/01 12:0 a.m.0 views

CVE-2025-67805

A non-default configuration in Sage DPW 202506004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installations and never available in Sage DPW Clou...

5.9CVSS5.9AI score0.00016EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.1 views

PT-2026-29528

A non-default configuration in Sage DPW 2025 06 004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installations and never available in Sage DPW...

5.9CVSS5.9AI score0.00016EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-23862

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00306EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/08/08 12:29 a.m.3 views

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

7.5CVSS6.1AI score0.00306EPSS
Exploits1References1
OSV
OSV
added 2025/08/06 4:15 p.m.3 views

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

7.5CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2025/08/06 4:15 p.m.9 views

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

7.5CVSS0.00306EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/08/06 12:0 a.m.3 views

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

7.5CVSS6AI score0.00306EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/08/06 12:0 a.m.4 views

PT-2025-32185 · Sage · Sage Dpw

Name of the Vulnerable Software and Affected Versions: Sage DPW versions prior to 2024 12 004 Description: Incorrect access control in Sage DPW allows unauthorized attackers to access the built-in Database Monitor via a crafted request. Recommendations: Update to version 2024 12 004 or later...

7.5CVSS6.2AI score0.00306EPSS
Exploits1References6
CVE
CVE
added 2025/08/06 12:0 a.m.12 views

CVE-2025-51532

Summary: CVE-2025-51532 concerns Sage DPW with improper access control that could allow unauthorized users to access the built‑in Database Monitor via a crafted request. The vulnerability is described for Sage DPW versions before 2025_06_000 (notably 2024_12_004 and earlier). Affected product/ver...

7.5CVSS6AI score0.00306EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/08/06 12:0 a.m.6 views

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

7.5CVSS0.00306EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.2 views

Sage DPW 安全漏洞

Sage DPW is an HR system from Sage UK. A security vulnerability exists in Sage DPW version v2024.12.003, which stems from improper access control and could lead to unauthorized access to the built-in database monitor...

7.5CVSS6.6AI score0.00306EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.1 views

SolarWinds Database Performance Monitor 跨站脚本漏洞

SolarWinds Database Performance Monitor is a database performance monitoring and optimization software from SolarWinds USA. A security vulnerability exists in SolarWinds Database Performance Monitor 2022.1.7779, no information about this vulnerability is available at this time, please stay tuned ...

6.8CVSS6.3AI score0.00772EPSS
Exploits0References4
Cvelist
Cvelist
added 2018/03/12 9:0 p.m.12 views

CVE-2016-0237

IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached browser data. IBM X-Force ID: 110328...

5AI score0.00046EPSS
Exploits0References2
CNVD
CNVD
added 2018/02/26 12:0 a.m.2 views

IBM Security Guardium Database Activity Monitor Authorization Vulnerability

IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. The product provides features such as automated controls for compliance and protection against internal and external threats. An authorization vulnerability exists in IBM Security Guardium Databas...

4.4CVSS6.4AI score0.00047EPSS
Exploits0References1
CNVD
CNVD
added 2016/12/30 12:0 a.m.2 views

IBM Security Guardium Database Activity Monitor Local Command Injection Vulnerability (CNVD-2017-00060)

IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. The product provides features such as automated controls for compliance and protection against internal and external threats. A local command injection vulnerability exists in IBM Security Guardiu...

7.8CVSS7.9AI score0.00076EPSS
Exploits0References1
Rows per page
Query Builder