6044 matches found
Security Bulletin: App Connect Enterprise Certified Container Integration Servers could allow information exposure when using MQ (CVE-2020-4498)
Summary App Connect Enterprise Certified Container Integration Servers could allow a local privileged user to obtain highly sensitive information due to inclusion of data within trace files when communicating with an MQ server due to CVE-2020-4498. Vulnerability Details CVEID: CVE-2020-4498...
CVE-2020-12595
An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...
CVE-2020-12595
An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...
CVE-2020-26832
SAP AS ABAP SAP Landscape Transformation, versions - 20111620, 20111640, 20111700, 20111710, 20111730, 20111731, 20111752, 2020 and SAP S4 HANA SAP Landscape Transformation, versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should b...
CVE-2020-26832
SAP AS ABAP SAP Landscape Transformation, versions - 20111620, 20111640, 20111700, 20111710, 20111730, 20111731, 20111752, 2020 and SAP S4 HANA SAP Landscape Transformation, versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should b...
NewStart CGSL CORE 5.05 / MAIN 5.05 : ipmitool Vulnerability (NS-SA-2020-0116)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ipmitool packages installed that are affected by a vulnerability: - It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to...
NewStart CGSL CORE 5.04 / MAIN 5.04 : ipmitool Vulnerability (NS-SA-2020-0077)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ipmitool packages installed that are affected by a vulnerability: - It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to...
CVE-2020-25723
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on t...
CVE-2020-25723
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on t...
Authentication flaw
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on t...
DEBIAN-CVE-2019-14553
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...
CVE-2019-14553
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...
CVE-2019-14553
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...
UBUNTU-CVE-2019-14553
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...
Authentication flaw
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...
LimeSurvey 跨站脚本漏洞
limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A stored cross-site scripting vulnerability exists in LimeSurvey 3.21.1 and earlier versions. An attacker with the correct privileges can...
WordPress Buddypress 6.2.0 Cross Site Scripting
Document Title: =============== Buddypress v6.2.0 WP Plugin - Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2263 Release Date: ============= 2020-11-13 Vulnerability Laboratory ID VL-ID: ===================================...
CVE-2020-0599
Improper access control in the PMC for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...