CVE-2023-30222

Affected product/implementation: 4D SAS 4D Server Application (4D Server) versions v17, v18, v19 R7 and earlier. Vulnerability summary: An information-disclosure flaw enables an attacker to retrieve password hashes for all users by eavesdropping on affected deployments. Root cause (as stated): In...

CVE-2023-30223

The CVE-2023-30223 entry concerns a broken authentication vulnerability in 4D SAS 4D Server software (versions to v17, v18, v19 R7 and earlier). According to connected sources, an attacker could send crafted TCP packets containing requests to perform arbitrary actions, indicating a remote, networ...

CVE-2023-30223

A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions...

CVE-2023-23720

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NetReviews SAS Verified Reviews Avis Vérifiés plugin = 2.3.13 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NetReviews SAS Verified Reviews Avis Vérifiés plugin = 2.3.13 versions...

CVE-2023-23720 WordPress Verified Reviews (Avis Vérifiés) Plugin <= 2.3.13 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NetReviews SAS Verified Reviews Avis Vérifiés plugin = 2.3.13 versions...

CVE-2023-23720

CVE-2023-23720 concerns the WordPress Verified Reviews (Avis Vérifiés) plugin (NetReviews for WordPress) with a Stored XSS vulnerability in versions

CVE-2023-23720: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NetReviews SAS Verified Reviews Avis Vérifiés plugin = 2.3.13 versions...

PT-2023-19159

Name of the Vulnerable Software and Affected Versions NetReviews SAS Verified Reviews plugin versions prior to 2.3.14 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the NetReviews SAS Verified Reviews plugin. This vulnerability requires...

sas-tec.de Cross Site Scripting vulnerability OBB-3335162

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: BladeCenter SAS RAID Module (RSSM) are affected by two vulnerabilities (CVE-2014-3018, CVE-2014-3019)

Summary Two vulnerabilities affect BladeCenter SAS RAID Module. Vulnerability Details Abstract Two vulnerabilities affect BladeCenter SAS RAID Module. Content Vulnerability Details: CVE-ID: CVE-2014-3018 Description: IBM SAS Connectivity Module NSSM and SAS RAID Module RSSM contain a denial of...

CVE-2023-24724

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

Cross site scripting

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

PT-2023-19749

Name of the Vulnerable Software and Affected Versions SAS Web Administration interface SASAdmin versions 9.4 M2 through 9.4 M2 SAS release versions 9.4 TS1M2 through 9.4 TS1M2 Description A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4...

CVE-2023-24724: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

CVE-2023-24724

A stored XSS vulnerability was identified in the SAS Admin Console (SAS Web Administration interface, SASAdmin). The issue resides in the user management module, arising from insufficient validation and sanitization of data entered in the user creation and editing forms. Affected product releases...

CVE-2023-24724

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...

SAS Admin Console Cross-Site Script Vulnerabilities

Sas Institute SAS Admin Console is an advanced analytics and business intelligence platform from Sas Institute, Inc. A security vulnerability exists in SAS Admin Console version 9.4, which stems from insufficient validation and cleaning of data entry for user-created and edited form fields...

PT-2025-41071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to SCSI operations with the hisi sas driver. Specifically, a NULL pointer dereference can occur when freeing slots, potentially triggered during...

PT-2025-18801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails INQUIRY commands. This leads to the driver freeing up the memory...