CVE-2023-30222

Affected product/implementation: 4D SAS 4D Server Application (4D Server) versions v17, v18, v19 R7 and earlier. Vulnerability summary: An information-disclosure flaw enables an attacker to retrieve password hashes for all users by eavesdropping on affected deployments. Root cause (as stated): In...

CVE-2023-23720

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NetReviews SAS Verified Reviews Avis Vérifiés plugin = 2.3.13 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NetReviews SAS Verified Reviews Avis Vérifiés plugin = 2.3.13 versions...

CVE-2023-23720 WordPress Verified Reviews (Avis Vérifiés) Plugin <= 2.3.13 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NetReviews SAS Verified Reviews Avis Vérifiés plugin = 2.3.13 versions...

CVE-2023-23720

CVE-2023-23720 concerns the WordPress Verified Reviews (Avis Vérifiés) plugin (NetReviews for WordPress) with a Stored XSS vulnerability in versions

sas-tec.de Cross Site Scripting vulnerability OBB-3335162

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: BladeCenter SAS RAID Module (RSSM) are affected by two vulnerabilities (CVE-2014-3018, CVE-2014-3019)

Summary Two vulnerabilities affect BladeCenter SAS RAID Module. Vulnerability Details Abstract Two vulnerabilities affect BladeCenter SAS RAID Module. Content Vulnerability Details: CVE-ID: CVE-2014-3018 Description: IBM SAS Connectivity Module NSSM and SAS RAID Module RSSM contain a denial of...

CVE-2023-24724

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

Cross site scripting

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

SAS Admin Console 跨站脚本漏洞

Sas Institute SAS Admin Console is an advanced analytics and business intelligence platform from Sas Institute, Inc. A security vulnerability exists in SAS Admin Console version 9.4, which stems from insufficient validation and cleaning of data entry for user-created and edited form fields...

CVE-2023-24724

A stored XSS vulnerability was identified in the SAS Admin Console (SAS Web Administration interface, SASAdmin). The issue resides in the user management module, arising from insufficient validation and sanitization of data entered in the user creation and editing forms. Affected product releases...

CVE-2023-24724

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

PT-2025-18801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails INQUIRY commands. This leads to the driver freeing up the memory...

SAS Airlines Hit by Cyber Attack

By Deeba Ahmed The cyber attack took place on Tuesday, February 14th evening, which forced the SAS Airlines' website and app to go offline and be inaccessible to passengers. This is a post from HackRead.com Read the original post: SAS Airlines Hit by Cyber Attack...

SUSE CVE-2009-3939

The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...

SUSE CVE-2017-9503

QEMU aka Quick Emulator, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service NULL pointer dereference and QEMU process crash via vectors involving megasas command processing...

SUSE CVE-2019-11810

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasascreateframepool fails in megasasalloccmds in drivers/scsi/megaraid/megaraidsasbase.c. This causes a Denial of Service, related to a use-after-free...

SUSE CVE-2019-19965

In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sasdiscover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5...

sas-sylt.de Cross Site Scripting vulnerability OBB-3171877

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-36181 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue concerns error handling in the sas phy add function within the scsi transport sas module. It was introduced in version v2.6.14 and fixed in version v5.15.80. The actual impact and...