CVE-2022-30076

ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting...

Microsoft Dynamics 跨站脚本漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics 365 Customer Voice. No informati...

The vulnerability of the Microsoft Dynamics 365 resource planning software server allows a hacker to execute arbitrary code.

The vulnerability of the software for quickly creating applications for Microsoft Dynamics 365 Unified Service Desk is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to carry out cross-site attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site attacks remotely...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to carry out cross-site attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site attacks remotely...

Vulnerabilities fixed in SAP products

SAP has released updates for several products, including SAP ERP, Netweaver, HAMA, Business Objects and SAP Solution Manager. A malicious party could potentially exploit the vulnerabilities and cause damage cause damage in the categories listed below: Cross-Site Scripting XSS Denial-of-Service Do...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2023-26762

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...

CVE-2023-26759

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malware file or a specially crafted...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malware file or a specially crafted...

SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. A security vulnerability exists in SAP ERP version 600. An attacker exploiting the vulnerability could view sensitive data...

frontaccounting 路径遍历漏洞

frontaccounting is a web-based accounting system for enterprise ERP supply chains by Frontaccounting Team. A path traversal vulnerability exists in frontaccounting faplanet, which stems from an unknown issue in the code that results in path traversal...

Huaxia ERP 安全漏洞

Huaxia ERP is an ERP software from Huaxia, China. A security vulnerability exists in Huaxia ERP that stems from an unknown method in the User Management component, where manipulation of the login parameter can result in an SQL injection...

The vulnerability of the processlogin.php implementation in the ERP system allows a perpetrator to execute arbitrary code.

The vulnerability of the processlogin.php implementation in the ERP system is related to the lack of measures taken to protect the SQL query structure during the processing of the user argument. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Apache OFBiz 路径遍历漏洞

Apache OFBiz is an enterprise resource planning ERP system from the Apache Foundation. A code injection vulnerability exists in Apache OFBiz 18.12.05 and earlier versions, which stems from an error in Birt and can be exploited by attackers to remotely execute code...

CVE-2022-31597

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to...

多款SAP产品安全漏洞

SAP ERP and others are products of SAP, a German company.SAP ERP is a series of software for ERP management.SAP Financials is a financial system.SAP S/4Hana Core is a complete and modular cloud ERP software.SAP ERP, SAP Financials, and SAP S/4Hana Core are products of SAP, a German company. A...

OTRS 安全漏洞

OTRS is an application from the German company OTRS. A service management software. A security vulnerability exists in OTRS versions 8.0.x through 8.0.23 and OTRS versions 7.0.x through 7.0.35, as well as OTRSCalendarResourcePlanning versions 8.0.x through 8.0.23 and 7.0.x through 7.0.31, which...