Lucene search
K

20 matches found

Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.5 views

PT-2025-49766

Due to a Missing Authorization Check vulnerability in SAP S/4 HANA Private Cloud Financials General Ledger, an authenticated attacker with authorization limited to a single company code could read sensitive data and post or modify documents across all company codes. Successful exploitation could...

7.1CVSS6.5AI score0.00041EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-1534

Malware in sbrugna...

4.3CVSS6.2AI score0.08245EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-14721

Malware in sbrugna...

5.3CVSS5.9AI score0.00564EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-4234

Malware in sbrugna...

7.5CVSS6.1AI score0.01636EPSS
Exploits4References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-1430

Malware in sbrugna...

7.5CVSS6.2AI score0.00535EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-4054

Malware in sbrugna...

7.8CVSS7.5AI score0.00295EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-5856

Malware in sbrugna...

7.5CVSS6AI score0.01495EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2025/05/22 10:18 a.m.6 views

CVE-2019-2638

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Consolidation Hierarchy Viewer. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows low privileged...

9.9CVSS7AI score0.01743EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/09/09 12:0 a.m.3 views

Indy Node 资源管理错误漏洞

Indy Node is the server part of a distributed ledger open-sourced by Hyperledger in the United States. Built specifically for decentralized identities. Indy Node suffers from a resource management error vulnerability that stems from the fact that an attacker can use the guidance provided in the...

7.5CVSS7.3AI score0.00594EPSS
Exploits0References3
CNVD
CNVD
added 2017/08/07 12:0 a.m.3 views

Ledger Denial of Service Vulnerability

Ledger is a powerful double-entry bookkeeping system accessible from the UNIX command line. A denial of service vulnerability exists in the findoption function in option.cc in Ledger, which can be exploited by a remote attacker to cause a denial of service stack buffer overflow and application...

7.8CVSS7.5AI score0.00295EPSS
Exploits0References1
OSV
OSV
added 2017/08/04 7:29 p.m.0 views

UBUNTU-CVE-2017-12481

The findoption function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

7.8CVSS7.4AI score0.00295EPSS
Exploits0References4
OSV
OSV
added 2017/08/04 7:29 p.m.0 views

UBUNTU-CVE-2017-12482

The ledger::parsedatemaskroutine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

7.8CVSS7.5AI score0.00295EPSS
Exploits0References4
OSV
OSV
added 2017/08/04 7:29 p.m.0 views

DEBIAN-CVE-2017-12481

The findoption function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

7.8CVSS7.8AI score0.00295EPSS
Exploits0References1
OSV
OSV
added 2009/12/23 6:30 p.m.5 views

CVE-2009-4402

The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative operations by providing an arbitrary password to the admin interface...

7.2AI score
Exploits0References3
OSV
OSV
added 2008/09/15 3:14 p.m.1 views

DEBIAN-CVE-2008-4077

The CGI scripts in 1 LedgerSMB LSMB before 1.2.15 and 2 SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service resource exhaustion via an HTTP POST request with a large Content-Length...

7.8CVSS6.8AI score0.01449EPSS
Exploits0References1
OSV
OSV
added 2007/03/20 10:19 p.m.4 views

CVE-2007-1541

Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a NULL %00 character to protect against directory traversal attacks, which allows remote attackers to run arbitrary executables and bypass authentication via a .. dot dot sequence in the login paramete...

7.3AI score
Exploits0References5
OSV
OSV
added 2007/03/13 7:19 p.m.4 views

CVE-2007-1436

Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authentication via unknown vectors that prevents a password check from occurring...

6.8AI score
Exploits0References9
OSV
OSV
added 2006/12/18 12:28 a.m.5 views

CVE-2006-5872

login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program...

7.3AI score
Exploits0References9
OSV
OSV
added 2006/09/14 9:7 p.m.3 views

CVE-2006-4798

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history...

6.8AI score
Exploits0References4
OSV
OSV
added 2006/09/14 9:7 p.m.1 views

DEBIAN-CVE-2006-4798

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history...

5CVSS7AI score0.00387EPSS
Exploits1References1
Rows per page
Query Builder