CVE-2020-6294

Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionalities that require user identity...

UBUNTU-CVE-2020-10756

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6sendechoreply routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory,...

Broadcom CA API Developer Portal Access Control Error Vulnerability

Broadcom CA API Developer Portal is an API developer portal product of Broadcom's complete API lifecycle management solution, which provides API release control, API performance monitoring and other functions. A security vulnerability exists in Broadcom CA API Developer Portal 4.3.1 and prior...

Broadcom CA API Developer Portal Input Validation Error Vulnerability (CNVD-2020-25822)

Broadcom CA API Developer Portal is an API developer portal product of Broadcom's complete API lifecycle management solution, which provides API release control, API performance monitoring and other functions. An input validation error vulnerability exists in Broadcom CA API Developer Portal...

SAP BusinessObjects Business Intelligence Reflective Cross-Site Scripting Vulnerability (CNVD-2019-34409)

SAP BusinessObjects Business Intelligence is a reporting and analytics business intelligence BI platform for enterprise users. A reflected cross-site scripting vulnerability exists in SAP BusinessObjects Business Intelligence versions prior to 4.2 and 4.3. The vulnerability stems from the product...

DEBIAN-CVE-2019-13274

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter...

CVE-2019-0331

Under certain conditions, SAP BusinessObjects Business Intelligence Platform BI Workspace, versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure...

CVE-2019-0287

Under certain conditions SAP BusinessObjects Business Intelligence platform Central Management Server, versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted...

CVE-2019-0259

SAP BusinessObjects, versions 4.2 and 4.3, Visual Difference allows an attacker to upload any file including script files without proper file format validation...

SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2019-04858)

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. A cross-site scripting vulnerability in SAP BusinessObjects Business...

SAP BusinessObjects Business Intelligence Platform Arbitrary File Upload Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. An arbitrary file upload vulnerability exists in SAP BusinessObjects...

ZeroMQ libzmq Code Execution Vulnerability

ZeroMQ libzmq aka 0MQ is a lightweight distributed messaging engine core library. A code execution vulnerability in the zzmq::v2decodert::sizeready in the v2decoder.cpp file in ZeroMQ libzmq version 4.2.x and 4.3.x versions prior to 4.3.1 can be exploited by an attacker to overwrite arbitrary byt...

Fastspot BigTree Information Disclosure Vulnerability

Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. An information disclosure vulnerability exists in the admin/news/ page in Fastspot BigTree version 4.3, which can be exploited by an attacker to obtain path information...

SQL Injection Vulnerability in QYKCMS v4.3.2

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS v4.3.2 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2018-17918

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page...

HPE Service Governance Framework Information Disclosure Vulnerability

HPE Service Governance Framework SGF is a service governance framework from Hewlett Packard Enterprise HPE. An information disclosure vulnerability exists in HPE SGF versions 4.2 and 4.3. A remote attacker could exploit this vulnerability to disclose information...

NetIQ Access Manager Reflective Cross-Site Scripting Vulnerability (CNVD-2018-06558)

Micro Focus NetIQ Access Manager is a resource access control solution from Micro Focus UK. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. A cross-site scripting vulnerability exists in Micro Focus NetIQ Access Manager versio...

NetIQ Access Manager Admin Console File Upload Vulnerability

NetIQ Access Manager NAM is a resource access control solution from NetIQ Corporation. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.Admin Console is one of the management console programs. A file upload vulnerability exists ...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Cluster Component (CNVD-2016-09693)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Solaris Cluster is one of the enterprise cluster components for the Oracle Sun Solaris operating system. A local security vulnerability exists in the Cluster Geo subcomponent of the Solaris Cluster...

GNU Bash Information Disclosure Vulnerability

GNU Bash is a shell command language interpreter written by American software developer Brian J. Fox for the GNU Project. An information disclosure vulnerability exists in GNU Bash version 4.3, which can be exploited by an attacker to obtain sensitive information or possibly cause a denial of...