Lucene search
+L

23 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/14 12:19 a.m.6 views

CVE-2026-44753

SAP HANA Database user self service tools allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts,...

3.7CVSS6.1AI score0.0022EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-1130

Malware in sbrugna...

7.2CVSS6.6AI score0.00392EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2016-4664

Malware in sbrugna...

5CVSS4.8AI score0.01549EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-1123

Malware in sbrugna...

7.5CVSS7.5AI score0.01075EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2016-4665

Malware in sbrugna...

5.5CVSS5.6AI score0.00375EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-7726

Malware in sbrugna...

10CVSS6.4AI score0.06547EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-19370

Malware in sbrugna...

5.5CVSS4.9AI score0.00683EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2021-8757

Malicious code in bioql PyPI...

9.8CVSS8.3AI score0.01208EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2021-8748

Malicious code in bioql PyPI...

6.5CVSS7AI score0.00701EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:34 p.m.10 views

CVE-2020-26834

SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid existing SAML bearer token to authenticate as a user whose name is identical to the truncated username for whom the SAML...

5.5CVSS6.9AI score0.00683EPSS
SaveExploits0
OSV
OSV
added 2021/03/09 3:15 p.m.8 views

CVE-2021-21484

LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind...

9.8CVSS7.3AI score0.01208EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/03/09 2:11 p.m.28 views

CVE-2021-21484

LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind...

7.7CVSS9.8AI score0.01208EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/02/24 12:0 a.m.10 views

SAP HANA Database Signature Validation Improperity Vulnerability

SAP HANA is a set of high-performance real-time data analytics platform from Germany's SAP, which supports users to query and analyze real-time business data. An improper signature validation vulnerability exists in SAP HANA Database versions 1.0 and 2.0. The vulnerability stems from the program...

6.5CVSS6.5AI score0.00701EPSS
SaveExploits0References1
Prion
Prion
added 2019/09/10 5:15 p.m.24 views

Design/Logic Flaw

The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges...

7.2CVSS6.8AI score0.00392EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2018/06/14 12:0 a.m.8 views

SAP Hana DB, UI5 and UI Cross-Site Scripting Vulnerabilities

SAP Hana DB, UI5, and UI are products of SAP, an in-memory database based on rows and columns.UI5 and UI are JavaScript-based UI libraries that integrate a large number of UI controls. A security vulnerability exists in SAP Hana DB, UI5, and UI that stems from the program's failure to validate us...

9.8CVSS6.9AI score0.02396EPSS
SaveExploits0References1
Prion
Prion
added 2018/06/12 3:29 p.m.22 views

Design/Logic Flaw

SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 Java 7.30, 7.31, 7.40...

5CVSS7.5AI score0.02396EPSS
SaveExploits0References3Affected Software4
OSV
OSV
added 2018/06/12 3:29 p.m.5 views

CVE-2018-2424

SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 Java 7.30, 7.31, 7.40...

7.5CVSS5.8AI score0.02396EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2018/06/12 3:0 p.m.27 views

CVE-2018-2424

SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 Java 7.30, 7.31, 7.40...

9.8CVSS9.6AI score0.02396EPSS
SaveExploits0References3
OSV
OSV
added 2017/04/13 2:59 p.m.6 views

CVE-2016-6143

SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806...

9.8CVSS6.1AI score0.03645EPSS
SaveExploits0References3
OSV
OSV
added 2016/09/26 4:59 p.m.5 views

CVE-2016-6142

SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP Security Note 2197459...

7.5CVSS6AI score0.02891EPSS
SaveExploits1References4
Rows per page
Query Builder