117 matches found
Dell ESI for SAP LaMa 安全漏洞
Dell ESI for SAP LAMA is a software solution that integrates SAP LaMa with Dell products from Dell USA. An information disclosure vulnerability exists in Dell ESI for SAP LAMA version 10.0, which can be exploited by an attacker to obtain administrator-level credentials by eavesdropping on network...
SUPERAntiSpyware Pro X Security Vulnerability
SUPERAntispyware is a security program from SUPERAntiSpyware. A security vulnerability exists in SUPERAntispyware Pro X version v10.0.1260, which originates from a programmatic denial of service by triggering the 0x9C402140 IOCTL code in the saskutil64.sys driver...
CVE-2023-33840
IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256037...
PT-2023-8373 · Ibm · Ibm Security Verify Governance
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0 Description: The issue is related to insufficient checking of arguments passed to a command, allowing a remote authenticated attacker to execute arbitrary commands on the system by sending a special...
IBM Security Verify Governance 安全漏洞
IBM Security Verify Governance is an intelligent identity access platform from International Business Machines IBM, Inc. provides organizations with a platform to analyze, define and control user access and access risk. IBM Security verify Governance version 10.0 has a plaintext transfer...
CVE-2023-39437
SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web page or application and gets it delivered to the client, resulting to Cross-site scripting. This could lead to harmful action affecting the Confidentiality, Integrity and Availability of...
SAP Business One Information Disclosure Vulnerability
SAP Business One is a set of enterprise management software from SAP. The software includes functionality for financial management, operations management, and human resource management. An information disclosure vulnerability exists in SAP Business One Service Layer version 10.0 that originates...
CVE-2023-35019
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 257873...
IBM Sterling Order Management 安全漏洞
IBM Sterling Order Management is an order management system from International Business Machines IBM. A security vulnerability exists in IBM Sterling Order Management version 10.0 that stems from not requiring users to use strong passwords by default, making it easier for attackers to break into...
PT-2023-13378 · Dell · Solution Enabler Vapp +2
Name of the Vulnerable Software and Affected Versions: Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp versions 10.0.0.5 and below Description: The issue allows users to perform actions for which they are not authorized due to an authorization bypass...
GLPI 输入验证错误漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...
Veritas NetBackup SQL注入漏洞
Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental data. A SQL injection...
PT-2022-26358 · Veritas · Netbackup
Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0 Description: A second-order SQL Injection attack can be leveraged against the NBFSMCLIENT service of the NetBackup Primary server. Recommendations: For versions prior to 10.0, update to version 10.0 or...
SAP Business One 代码问题漏洞
SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. A denial-of-service vulnerability exists in SAP Business One version 10.0, which stems from improper input clean...
CVE-2021-3779
A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later...
GLPI 信息泄露漏洞
GLPI is an open source IT and asset management software. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridges and ink cartridges. An...
Home Assistant 安全漏洞
Home Assistant is an open source home automation management system. The system is primarily used to control home automation devices. A security vulnerability exists in Home Assistant Community Add-on: SSH & Web Terminal versions prior to 10.0.0. There is no information about this vulnerability at...
Vulnerabilities fixed in SAP products
Vulnerabilities have been fixed in several SAP products. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security measure. Remote code...
CVE-2021-25876
AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...