2753 matches found
CVE-2021-44876
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the identification of t...
CVE-2021-44876
Dalmark Systems Systeam 2.22.8 build 1724 ERP is vulnerable to User enumeration due to differing authentication messages during tenant/user validation, enabling a brute-force attack with valid users. Root cause: message-based user existence disclosure during tenant resolution. Impact is stated as...
CVE-2021-44875
CVE-2021-44875 affects Dalmark Systems Systeam 2.22.8 build 1724. The issue is a user-enumeration flaw in the password-recovery flow: the application returns messages that differ depending on whether a user exists, enabling a brute-force attack to identify valid users. The vulnerability is docume...
CVE-2021-44875
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery...
CVE-2021-44877
CVE-2021-44877 affects Dalmark Systems Systeam 2.22.8 build 1724. A broken access control flaw allows an unauthenticated attacker to use an API endpoint to generate a temporary JWT token that references the correct tenant before authentication and to request system configuration parameters. This ...
Dalmark Systems Systeam 安全漏洞
Dalmark Systems Systeam is an Erp system from Dalmark Systems, a Brazilian company. version 2.22.8 build 1724 of Dalmark Systems Systeam contains a security vulnerability that could be exploited by an attacker to brute-force a valid user...
Dolibarr ERP
Dolibarr ERP...
CVE-2021-33618
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by and characters in the onpointermove attribute of a BODY element to the user-management feature...
CVE-2021-33618
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by and characters in the onpointermove attribute of a BODY element to the user-management feature...
Design/Logic Flaw
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by and characters in the onpointermove attribute of a BODY element to the user-management feature...
CVE-2021-33618
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by and characters in the onpointermove attribute of a BODY element to the user-management feature...
UBUNTU-CVE-2021-33618
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by and characters in the onpointermove attribute of a BODY element to the user-management feature...
CVE-2021-33618
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by and characters in the onpointermove attribute of a BODY element to the user-management feature...
CVE-2021-33618
Dolibarr ERP and CRM 13.0.2 is affected by a cross-site scripting (XSS) vulnerability (CVE-2021-33618) in the user-management feature. The issue arises from the onpointermove attribute on a BODY element, allowing injection via object details (e.g., using > and
CVE-2021-42062
SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...
Authorization
SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...
CVE-2021-42062
SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...
CVE-2021-42062
CVE-2021-42062 affects SAP ERP HCM Portugal where a report that reads employee payroll data fails to perform necessary authorization checks. The root cause is missing access controls on that read-only payroll report. Impact is limited to disclosure of payroll information (no data modification or ...
Dolibarr ERP / CRM 13.0.2 Cross Site Scripting Vulnerability
Stored cross-site scripting in Dolibarr ERP & CRM Overview Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2105-02 Affected product: Dolibarr ERP & CRM Tested versions: Dolibarr 13.0.2 Vendor: Dolibarr foundation, https://www.dolibarr.org Credits:...