SAP Commerce Cloud 跨站脚本漏洞

SAP Commerce Cloud is a set of cloud-based e-commerce platform from Germany's SAP. It supports sales management, marketing management, order management, and operations management. SAP Commerce Cloud suffers from a cross-site scripting vulnerability that stems from a vulnerability in MIME sniffing...

SAP NetWeaver AS ABAP Business Server 缓冲区错误漏洞

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP Germany.A security vulnerability exists in SAP NetWeaver AS ABAP Business Server, which stems from a memory corruption vulnerability in NetWeaver ABAP Server and ABAP Platfor...

CVE-2021-25166

A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...

CVE-2021-2053

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: UI Framework. The supported version that is affected is 13.4.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Ba...

Vangene deltaFlow E-platform 代码问题漏洞

The Vangene deltaFlow E-platform is an application system from Vangene, China. Standard forms can be set up quickly in less than five minutes. A code issue exists in Vangene deltaFlow E-platform, which is caused by the upload function not being properly access controlled. A remote attacker can...

Vangene deltaFlow E-platform 路径遍历漏洞

The Vangene deltaFlow E-platform is an application system from Vangene, China. Standard forms can be set up quickly in less than five minutes. A path traversal vulnerability exists in Vangene deltaFlow E-platform, which can be exploited by remote attackers to access credential data...

BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in BIG-IP, which stems from the lack of proper validation of client-side data by t...

CVE-2021-20358

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965...

Arbitrary Code Execution Vulnerability in Multiple Apple Products

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple iOS is an operating system developed for mobile devices.Apple iTunes for Windows is a Windows-based media player application.... Apple iTunes for Windows is a media player...

Unauthorized Access Vulnerability in Husoft UMIS Collaborative Management Platform of Shanghai Internet Software Group Co.

Husoft UMIS collaborative management platform is a human-centered, process-oriented, knowledge-based systematic management tool for organizations to create efficient communication and close collaboration. Shanghai Internet Software Group Co., Ltd. Husoft UMIS collaborative management platform...

SAP Business Objects Business Intelligence Platform Code Issue Vulnerability (CNVD-2020-62943)

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. A code issue vulnerability exists in SAP Business Objects Business...

DEBIAN-CVE-2020-14578

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols ...

Design/Logic Flaw

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

The vulnerability of the corporate platform Red Hat OpenShift Container Platform allows a hacker to redirect network traffic.

The vulnerability of the Red Hat OpenShift Container Platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to redirect network traffic...

SQL Injection Vulnerability in Streaming Media System Platform of Beijing Century Sunflower Digital Media Technology Co.

Sunflower streaming media service system is a complete set of IP network-based audio and video application platform, she integrated the Century Sunflower video broadcasting system, video-on-demand system, video broadcasting system, as well as data distribution, business management and other...

SQL Injection Vulnerability in the Payment Platform of Harbin Xinzhongxin Electronics Co.

Harbin Xinzhongxin Electronic Co., Ltd. is a payment platform solution provider. A SQL injection vulnerability exists in the payment platform of Harbin Xinzhongxin Electronics Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZhuoSoft Metrology Business Management Platform of Hunan Huamei Information System Co.

Hunan Huamei Information System Co., Ltd. is an IT services and industry solutions provider for government market regulators, inspection and testing organizations, certification and accreditation companies, as well as corporate laboratories and other industry clients. Hunan Huamei Information...

Arbitrary File Download Vulnerability in Education Resources Cloud Platform

Guangzhou Ncast Electronic Technology Co., Ltd hereinafter referred to as Ncast, founded in 2007, is a high-tech enterprise focusing on three major fields of multimedia communication, video and audio coding and decoding, and intelligent image processing. An arbitrary file download vulnerability...

File Upload Vulnerability in B2C (Self-operated) Version of Mall

B2C self-operated version of the mall is a set of self-operated e-commerce system software for merchants developed by Yunmai E-commerce Co. A file upload vulnerability exists in the B2C self-managed version of Mall, which can be exploited by attackers to gain control of the web server...

SQL injection vulnerability in exlive 2.0 auto loan risk management platform

exlive 2.0 Car Loan Risk Management Platform is a management system that mentions to solve the problems of car loan risk management industry. exlive2.0 Auto Loan Risk Management Platform suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive informatio...