9933 matches found
PT-2020-18997
Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform CMC versions 4.1, 4.2 Description The issue involves the disclosure of cleartext passwords in responses, potentially leading to information disclosure. This could be exploited through social...
PT-2020-19019
Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform versions 4.1, 4.2 Description The Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform does not sufficiently encode user-controlled inputs, resulting in a...
PT-2020-19024
Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface version 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability. This...
PT-2020-2048
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A denial of service issue exists due to improper handling of objects in memory. This could allow an attacker to cause a denial of service. Recommendations At the moment, there is no informati...
PT-2020-2050
Name of the Vulnerable Software and Affected Versions Microsoft Graphics Components affected versions not specified Description A remote code execution issue exists in the way Microsoft Graphics Components handle objects in memory. This allows remote attackers to execute arbitrary code and affect...
CVE-2020-6222: Improper Neutralization of Input During Web Page Generation
SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2020-6221: Improper Neutralization of Input During Web Page Generation
Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2020-6237: Undefined Security Weakness
Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
Security Updates for Microsoft Excel Products (April 2020)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data...
Information Disclosure
auth0.js is vulnerable to information disclosure. Error objects are returned by the library containing confidential information such as the original request of the user or the plaintext password entered by the user...
Same-Origin Policy Bypass
firefox is vulnerable to Same-Origin policy bypass. A flaw was found in the way Firefox handled frame objects with certain names. An attacker could use this flaw to cause a plug-in to grant its content access to another site or the local file system, violating the same-origin policy...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists as two use-after-free flaws were found in the Firefox mObserverList and mChannel objects. Malicious content could use these flaws to execute arbitrary code with the privileges of the user running Firefox...
Arbitrary Code Execution
java is vulnerable to arbitrary code execution. The vulnerability exists as the flaws in the CORBA implementation could allow an attacker to execute arbitrary code by misusing permissions granted to certain system objects...
Integer Overflows
WebKitGTK+ is vulnerable to integer overflows. It is due to a flaw in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari , allowing remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving Text objects...
Denial Of Service (DoS)
squid is vulnerable to denial of service. A flaw was found in the way squid stored HTTP headers for cached objects in system memory. An attacker could cause squid to use additional memory, and trigger high CPU usage when processing requests for certain cached objects, possibly leading to a denial...
Update Rollup 13 for System Center 2012 R2 Operations Manager
Update Rollup 13 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Operations Manager. This article also contains the installation instructions for this update. Issues that are fixed...
November 11, 2014 update for PowerPoint 2007 (KB2597972)
November 11, 2014 update for PowerPoint 2007 KB2597972 This article describes update KB2597972 for Microsoft PowerPoint 2007 that was released on November 11, 2014. This update improves the user experience in Office 2010 for when you use OLE objects in an Office 2010 application. How to download...
CVE-2020-11630
The CVE-2020-11630 issue affects EJBCA: versions before 6.15.2.6 and 7.x before 7.3.1.2. The root cause is improper verification during deserialization of serialized objects exchanged between nodes over the Peers protocol, allowing insecure objects to be deserialized. This addresses a high-severi...
