PT-2020-12443 · Western Digital · Western Digital My Cloud Home +1

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home and ibi devices versions prior to 2.2.0 Description: The issue allows clickjacking on sign-in pages. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue...

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...

CVE-2020-6215

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection...

CVE-2020-6217

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

Design/Logic Flaw

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection...

Cross site scripting

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6217

The CVE-2020-6217 entry concerns SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, affected in versions 700–754, with a reflected XSS due to insufficient encoding of user-controlled inputs in the Web UI. The issue is documented across multiple sources (e.g., Red Hat, CNVD, CVE re...

CVE-2020-6223

The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modify certain error pages to include malicious content. This can misdirect a user who is tricked into accessing these error pages rendered by the application, leading to Content...

CVE-2020-6223

The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modify certain error pages to include malicious content. This can misdirect a user who is tricked into accessing these error pages rendered by the application, leading to Content...

Open redirect

The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modify certain error pages to include malicious content. This can misdirect a user who is tricked into accessing these error pages rendered by the application, leading to Content...

CVE-2020-6223

The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modify certain error pages to include malicious content. This can misdirect a user who is tricked into accessing these error pages rendered by the application, leading to Content...

PT-2020-19014 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754 Description: The issue allows an attacker to redirect users to a malicious site due to insufficient URL...

Shanghai Danfan Network Technology Co., Ltd. station building system ab**.php, se**.php and other pages exist SQL injection vulnerability

Shanghai Danfan network science and technology limited company builds the station system is for the chemical industry to provide the security, the high efficiency, the multi-function, the system matching B2B electronic commerce platform specialized website. Shanghai Danfan network science and...

CVE-2020-6215

CVE-2020-6215 affects SAP NetWeaver AS ABAP with the BSP Test Application IT00. The issue is an open URL redirection caused by insufficient input/URL validation, enabling attackers to redirect users to a malicious site and potentially steal credentials. Affected versions cover SAP NetWeaver ABAP ...

COVID-19 Phishing: Exploiting a Global Pandemic

It's sad to think criminals are hard at work taking advantage of the extraordinary stress the world's population is currently experiencing. But they are. New phishing scams exploiting anxiety about COVID-19 are trending upward. Akamai's Carrier Data Science and Threat Research teams analyzing...

Cross-Site Request Forgery (CSRF)

samba is vulnerable to cross-site request forgery CSRF. It was found that SWAT web pages did not protect against Cross-Site Request Forgery CSRF attacks. If a remote attacker could trick a user, who was logged into the SWAT interface, into visiting a specially-crafted URL, the attacker could...

Cross-Site Scripting (XSS)

ruby is vulnerable to cross-site scripting XSS. A cross-site scripting XSS flaw was found in the way WEBrick displayed error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially-crafted URL...

Denial Of Service (DoS)

kernel-rt is vulnerable to Denial of Service DoS. The attack exists because it uses unsafe sprintf in the Bluetooth implementation, creating a large number of Bluetooth L2CAP, SCO, or RFCOMM sockets could result in arbitrary memory pages being overwritten, allowing a local, unprivileged user to...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting XSS. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting XSS. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...