Lucene search
+L

17704 matches found

OSV
OSV
added 2022/10/11 9:15 p.m.14 views

CVE-2022-35226

SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pag...

6.1CVSS5.8AI score0.00528EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/11 9:15 p.m.25 views

CVE-2022-35226

SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pag...

6.1CVSS0.00528EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/11 9:15 p.m.6 views

CVE-2022-35226

SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pag...

6.1CVSS5.8AI score0.00528EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.30 views

Code injection

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

1.9CVSS5.4AI score0.00248EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.20 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File .iv, vrml.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow ...

4.4CVSS7.9AI score0.00584EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.25 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format .pdf, PDFPublishing.dll file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

4.4CVSS7.9AI score0.00357EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.18 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script .eps, ai.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

4.4CVSS7.9AI score0.00637EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.34 views

Code injection

Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part .catpart, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

1.9CVSS5.4AI score0.00248EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.17 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds .wrl, vrml.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a...

4.4CVSS7.9AI score0.00572EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.26 views

Code injection

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack...

6.8CVSS8.7AI score0.00811EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.24 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation .jt, JtTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

4.4CVSS7.9AI score0.00519EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.21 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

4.4CVSS7.9AI score0.00584EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.22 views

Information disclosure

SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses encryption method which lacks proper diffusion and does not hide the patterns well. This can lead to information disclosure. In certain scenarios, application might also be susceptible to replay attacks...

3.6CVSS5AI score0.00166EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.25 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation .jt, JTReader.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

4.4CVSS7.9AI score0.00584EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/10/11 9:15 p.m.7 views

CVE-2022-39802

SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow arbitrary traversal of directories on the remote server. The file content within each directory can b...

7.5CVSS6AI score0.07096EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.22 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dwg, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

4.4CVSS7.9AI score0.00519EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.29 views

Design/Logic Flaw

Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Postscript .eps, ai.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

4.4CVSS7.5AI score0.00224EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.24 views

Code injection

Due to lack of proper memory management, when a victim opens manipulated Jupiter Tesselation .jt, JTReader.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

4.4CVSS7.5AI score0.00314EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.28 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part .sldprt, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

4.4CVSS7.9AI score0.00539EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/11 9:15 p.m.26 views

Design/Logic Flaw

Due to lack of proper memory management, when a victim opens manipulated Portable Document Format .pdf, PDFPublishing.dll file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the use...

1.9CVSS5.4AI score0.00201EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder