LU Master 6.0 official version has dll hijacking vulnerability

LU Master is a free system tool software in China. A dll hijacking vulnerability exists in LU Master 6.0 official version. An attacker can exploit this vulnerability to execute malicious code...

SAP NetWeaver Master Data Management Information Disclosure Vulnerability (CNVD-2021-03698)

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. A security vulnerability exists in SAP NetWeaver Master Data Management that could be exploited by an attacker to obtain sensitive information...

hltc-webapi-master (>=1.0.0, <=1.2.0), verda (>=0.1.0, <=1.2.1) potentially affected by CVE-2020-7784 via ts-process-promises (1.0.2)

ts-process-promises NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ts-process-promises and may be impacted: - hltc-webapi-master =1.0.0, =0.1.0, =1.2.1 Source cves: CVE-2020-7784 Source advisory: OSV:GHSA-WW4J-C2RQ-47Q8...

Pepperl Fuchs IO-link Master Series Product Code Issue Vulnerability

The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...

Pepperl Fuchs IO-link Master Series Operating System Command Injection Vulnerability

The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...

Pepperl Fuchs IO-Link Master Series Cross-Site Request Forgery Vulnerability

The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...

Pepperl Fuchs IO-link Master Series Cross-Site Scripting Vulnerability

The Pepperl Fuchs IO-link Master Series is a series of industrial devices for managing communications between sensors and controllers from Pepperl Fuchs, Germany. The devices can be used in a gateway function between Ethernet and IO-Link, facilitating reliable and efficient communication between...

CVE-2021-21469

When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any level e.g., MDS...

CVE-2021-21469

When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any level e.g., MDS...

CVE-2021-21469

When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any level e.g., MDS...

CVE-2021-21469

Summary: CVE-2021-21469 affects SAP NetWeaver Master Data Management (MDS) on Windows. Multiple connected sources corroborate that an external operator could set custom UNC paths in the MDS server configuration, enabling an SMB relay-like attack that may lead to information disclosure. Reported a...

PT-2021-14537 · Sap · Sap Netweaver Master Data Management

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Master Data Management versions 7.10, 710, and 710.750 Description: The issue arises when security guidelines for SAP NetWeaver Master Data Management running on Windows have not been thoroughly reviewed. This oversight might...

SAP NetWeaver Master Data Management 信息泄露漏洞

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. A security vulnerability exists in SAP NetWeaver Master Data Management that could be exploited by an attacker to obtain sensitive information...

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

Design/Logic Flaw

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

Default configuration

An issue was discovered in Veritas NetBackup through 8.3.0.1 and OpsCenter through 8.3.0.1. Processes using OpenSSL attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under the...

CVE-2020-36163

An issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under...

WordPress Quiz and Survey Master plugin Arbitrary File Upload Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Quiz and Survey Master plugin is a plugin in WordPress. An arbitrary file upload vulnerability exis...

CVE-2020-35951

An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurre...