PT-2017-18619

Name of the Vulnerable Software and Affected Versions SAP HANA XS versions 1.00 through 2.00 Description The issue allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy. Recommendations For SAP HANA XS versions 1.00 through 2.00, at...

PT-2017-18620

Name of the Vulnerable Software and Affected Versions SAP HANA XS versions 1.00 through 2.00 Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and service crash. This can be achieved by pushing a package with a filename containing a $...

paperplane.su XSS vulnerability

Open Bug Bounty ID: OBB-221780 Description| Value ---|--- Affected Website:| paperplane.su Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-3640

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispatcher trace files, aka SAP Security Note 2148905...

CVE-2016-3640

The SAP HANA DB vulnerability CVE-2016-3640 affects Extended Application Services (XS/XS Engine) in SAP HANA DB version 1.00.091.00.1418659308. The issue allows local users to disclose sensitive password information via vectors related to passwords in Web Dispatcher trace files (as described in S...

CVE-2016-3640

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispatcher trace files, aka SAP Security Note 2148905...

CVE-2016-3640: Exposure of Sensitive Information to an Unauthorized Actor

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispatcher trace files, aka SAP Security Note 2148905...

SAP HANA DoS

The vulnerability of the XS engine of the SAP HANA database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted HTTP request related to the debugging function...

SAP HANA Code Execution

The vulnerability of the XS engine hdbxsengine of the SAP HANA database management system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code using a specially crafted HTTP request related to JSON...

CVE-2016-1928

Buffer overflow in the XS engine hdbxsengine in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON, aka SAP Security Note 2241978...

Design/Logic Flaw

The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service disk consumption and process crash via a crafted HTTP request, related to an unspecified debug function, aka SAP Security Note 2241978...

Buffer overflow

Buffer overflow in the XS engine hdbxsengine in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON, aka SAP Security Note 2241978...

CVE-2016-1929

The CVE-2016-1929 vulnerability affects the SAP HANA XS engine and allows remote attackers to spoof log entries in trace files, causing denial of service (disk consumption and process crash) via a crafted HTTP request related to an unspecified debug function (SAP Security Note 2241978). No exploi...

CVE-2016-1928

Buffer overflow in the XS engine hdbxsengine in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON, aka SAP Security Note 2241978...

CVE-2016-1928

CVE-2016-1928 affects SAP HANA XS engine (hdbxsengine). A buffer overflow in the XS engine can be triggered by a crafted HTTP request (JSON-related), allowing remote attackers to cause a denial of service or execute arbitrary code. The vulnerability is associated with SAP Security Note 2241978. F...

CVE-2016-1929: Improper Input Validation

The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service disk consumption and process crash via a crafted HTTP request, related to an unspecified debug function, aka SAP Security Note 2241978...

PT-2016-1129

Name of the Vulnerable Software and Affected Versions SAP HANA affected versions not specified Description The issue allows remote attackers to spoof log entries in trace files, potentially causing a denial of service due to disk consumption and process crash. This is achieved via a crafted HTTP...

PT-2016-1128

Name of the Vulnerable Software and Affected Versions SAP HANA affected versions not specified Description The issue is related to a buffer overflow in the XS engine of SAP HANA, which can be exploited by remote attackers via a crafted HTTP request related to JSON. This can lead to a denial of...

CVE-2015-7993

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397...

Design/Logic Flaw

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397...