The vulnerability of the SAP PowerDesigner Proxy’s SQL query transformation service lies in the lack of quotation marks when writing elements or search paths. This allows attackers to exploit their privileges.

The vulnerability of the SAP PowerDesigner Proxy SQL query transformation service is related to the absence of quotes in the syntax of search elements or paths. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-5242

openHAB before 2.5.2 allow a remote attacker to use REST calls to install the EXEC binding or EXEC transformation service and execute arbitrary commands on the system with the privileges of the user running openHAB. Starting with version 2.5.2 all commands need to be whitelisted in a local file...

CVE-2020-5242

openHAB prior to 2.5.2 is affected. A remote attacker can use REST calls to install the EXEC binding or EXEC transformation service and execute arbitrary commands with the privileges of the openHAB user. The root cause is lack of proper enforcement of command installation via REST until 2.5.2. Fi...

CVE-2000-0485

Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service DTS package Properties dialog, aka the "DTS Password" vulnerability...

CVE-2000-0654

The CVE-2000-0654 issue concerns Microsoft Enterprise Manager and its Data Transformation Services (DTS) Registered Servers Dialog. The vulnerability enables local users to obtain database passwords via the DTS Password mechanism, i.e., a local-authority disclosure of credentials within the DTS p...

CVE-2000-0654

Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service DTS package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability...

CVE-2000-0485

Summary: The provided documents describe a vulnerability in Microsoft SQL Server related to Data Transformation Services (DTS) Password handling. Local users can obtain database passwords via the DTS package Properties dialog, i.e., the "DTS Password" vulnerability. The available records do not s...

CVE-2000-0654

Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service DTS package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability...