Lucene search
+L

820 matches found

Positive Technologies
Positive Technologies
added 2024/07/08 12:00 a.m.8 views

PT-2024-9880 · Sap · Sap Business Warehouse - Business Planning/Simulation

Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse - Business Planning and Simulation affected versions not specified Description: The issue is related to Stored Cross-Site Scripting XSS due to insufficient encoding of user-controlled inputs. This allows users to modify...

5.5CVSS5.5AI score0.0024EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/07/08 12:00 a.m.15 views

PT-2024-9861 · Sap · Sap Business Warehouse - Business Planning/Simulation

Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse - Business Planning and Simulation affected versions not specified Description: The issue is related to insufficient encoding of user-controlled inputs in the SAP Business Warehouse - Business Planning and Simulation...

6.4CVSS5.8AI score0.00256EPSS
SaveExploits0References8
OSV
OSV
added 2024/06/20 5:15 p.m.10 views

CVE-2024-37346

There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13.06. Attackers with system administrator permissions can impair the availability of certain elements of the Secure Access administrative UI by writing invalid data to the...

4.9CVSS5.8AI score0.004EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/20 5:15 p.m.39 views

CVE-2024-37346

There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13.06. Attackers with system administrator permissions can impair the availability of certain elements of the Secure Access administrative UI by writing invalid data to the...

4.9CVSS0.004EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/20 4:51 p.m.76 views

CVE-2024-37346

CVE-2024-37346 affects Absolute Secure Access (Warehouse component) prior to version 13.06. Root cause is insufficient input validation in the Warehouse when data is written to it over the network. Attackers with system administrator permissions can impair the availability of elements in the Secu...

4.9CVSS5.1AI score0.004EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/06/20 4:51 p.m.38 views

CVE-2024-37346 Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06

There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13.06. Attackers with system administrator permissions can impair the availability of certain elements of the Secure Access administrative UI by writing invalid data to the...

4.9CVSS0.004EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/20 4:51 p.m.20 views

CVE-2024-37346 Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06

There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13.06. Attackers with system administrator permissions can impair the availability of certain elements of the Secure Access administrative UI by writing invalid data to the...

4.9CVSS7.2AI score0.004EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/20 12:00 a.m.10 views

PT-2024-27489 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: The issue is related to insufficient input validation in the Warehouse component. Attackers with system administrator permissions can impair the availability of certain elements of t...

4.9CVSS7.1AI score0.004EPSS
SaveExploits0References7
NVD
NVD
added 2024/05/29 1:15 p.m.31 views

CVE-2023-42005

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264...

8.8CVSS7.2AI score0.00287EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/05/09 12:00 a.m.12 views

Apache Hive Code Injection Vulnerability

Apache Hive is a set of data warehouse software based on Hadoop Distributed Systems Infrastructure from the Apache Apache Foundation in the United States. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. A code...

6.6CVSS7.5AI score0.01103EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/01 6:15 p.m.8 views

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

5.3CVSS5.7AI score0.0087EPSS
SaveExploits4References1
NVD
NVD
added 2024/05/01 6:15 p.m.21 views

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

5.3CVSS6.7AI score0.0087EPSS
SaveExploits4References1
OSV
OSV
added 2024/05/01 6:15 p.m.9 views

CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

5.3CVSS5.8AI score0.0087EPSS
SaveExploits4References1
NVD
NVD
added 2024/05/01 6:15 p.m.34 views

CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

5.3CVSS7.2AI score0.00437EPSS
SaveExploits4References1
Cvelist
Cvelist
added 2024/05/01 12:00 a.m.55 views

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

6.9AI score0.0087EPSS
SaveExploits4References1
CNNVD
CNNVD
added 2024/05/01 12:00 a.m.14 views

LoMag WareHouse Management 安全漏洞

LoMag WareHouse Management is a warehouse management software from LoMag. A security vulnerability exists in LoMag WareHouse Management versions 1.0.20.120 and earlier, which stems from the use of hard-coded passwords for forms and SQL connections by default...

8.1CVSS7.3AI score0.0087EPSS
SaveExploits4References2
Vulnrichment
Vulnrichment
added 2024/05/01 12:00 a.m.33 views

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

7AI score0.0087EPSS
SaveExploits4References1
Positive Technologies
Positive Technologies
added 2024/05/01 12:00 a.m.9 views

PT-2024-24461 · Unknown · Lomag Warehouse Management

Name of the Vulnerable Software and Affected Versions: LoMag WareHouse Management application versions 1.0.20.120 and older Description: The issue concerns the use of hard-coded passwords by default for forms and SQL connections. Recommendations: For versions 1.0.20.120 and older, update the...

8.1CVSS7.4AI score0.0087EPSS
SaveExploits4References4
Vulnrichment
Vulnrichment
added 2024/05/01 12:00 a.m.18 views

CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

7.9AI score0.0087EPSS
SaveExploits4References1
Cvelist
Cvelist
added 2024/05/01 12:00 a.m.48 views

CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

7.5AI score0.0087EPSS
SaveExploits4References1
Rows per page
Query Builder