PT-2020-2539

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting versions 11.1.2.4 Description The issue is related to insufficient access control in the Web Based Report Designer component of Oracle Hyperion Financial Reporting. It allows a remote attacker to gain...

PT-2020-2064

Name of the Vulnerable Software and Affected Versions Vijeo Designer Basic versions V1.1 HotFix 15 and prior Vijeo Designer versions V6.9 SP9 and prior Description A vulnerability exists in the software related to untrusted search paths, which could allow an attacker to execute arbitrary code on...

phpMyAdmin: SQL injection

Background phpMyAdmin is a web-based management tool for MySQL databases. Description PhpMyAdmin was vulnerable to an SQL injection attack through the designer feature. Impact An authenticated remote attacker, by specifying a specially crafted database/table name, could trigger an SQL injection...

Memory Corruption Vulnerability in PM Designer by Yonghong (CNVD-2020-23803)

Ltd. was founded in Taiwan in 1992 by a group of engineers engaged in PLC design and development. A memory corruption vulnerability exists in PM Designer, a PM3 file that is a project file for the software. The software has a security vulnerability in the handling of PM3 images, which can be...

Memory Corruption Vulnerability Exists in Yonghong PM Designer (CNVD-2020-18784)

PM Designer is a programmable logic controller. A memory corruption vulnerability exists in Yonghong PM Designer when handling plf files. An attacker can cause the program to crash by constructing a malformed file...

azureml-designer-recommender-modules (0.0.1), monk-cuda100 (0.0.1) +9 more potentially affected by CVE-2020-5215 via tensorflow-gpu (2.0.0)

tensorflow-gpu PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - azureml-designer-recommender-modules 0.0.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test...

GHSA-JGJC-332C-8CMC SQL injection in phpMyAdmin

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

SQL injection in phpMyAdmin

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

Memory Corruption Vulnerability in Sosi Logo Designer

Shos Logo Designer is a logo creation software. A memory corruption vulnerability exists in the handling of custom project files by SUS Logo Designer. An attacker could exploit the vulnerability to cause the program to crash...

FreeBSD : phpmyadmin -- multiple vulnerabilities (ca3fe5b3-185e-11ea-9673-4c72b94353b5)

the phpmyadmin team reports : This security fix is part of an ongoing effort to improve the security of the Designer feature and is designated PMASA-2019-5. There is also an improvement for how we sanitize git version information shown on the home page. C Tenable Network Security, Inc. The...

SQL Injection

phpmyadmin/phpmyadmin is vulnerable to SQL injection. The vulnerability exists as the database and table name of designer feature is not properly sanitized to prevent arbitrary SQL query to be injected and executed...

DEBIAN-CVE-2019-18622

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

CVE-2019-18622

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

CVE-2019-18622

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

CVE-2019-18622

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

Unrestricted file upload

Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload...

CVE-2013-6234: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload...

CVE-2019-18622: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

PT-2019-15539

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.9.2 Description A SQL injection attack can be triggered through the designer feature by using a crafted database or table name. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or later to...

PT-2019-6991

Name of the Vulnerable Software and Affected Versions SpagoBI versions prior to 4.1 Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to the Worksheet designer, and then accessing it via a direct request. This is...