CVE-2015-7993

CVE-2015-7993 affects SAP HANA DB Extended Application Services (XS/XS Engine) in version 1.00.73.00.389160 (NewDB100_REL). The vulnerability enables remote arbitrary code execution via unspecified vectors related to HTTP Login (SAP Security Note 2197397). The connected sources confirm the affect...

SAP HANA hdbxsengine JSON - DoS

Application: SAP HANA Versions Affected: SAP HANA 1.00.095 Vendor URL: http://www.sap.com Bugs: DoS Reported: 28.09.2015 Vendor response: 29.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2241978 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: DoS Impact:...

SAP HANA system exposed to security vulnerabilities, static key exists in the database-vulnerability warning-the black bar safety net

! SAP is well-known in-memory database management system HANA was traced to the presence of security vulnerabilities, static encryption key is actually stored in the database. SAP HANA is SAP ever the fastest-growing products. Vulnerability overview ERPScan researchers held in Amsterdam the black...

CVE-2015-3994

The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818...

CVE-2015-3994

The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818...

CVE-2015-3994

CVE-2015-3994 affects SAP HANA DB (XS Engine) version 1.00.73.00.389160 (NewDB100_REL). The vulnerability resides in the grant.xsfunc application under testApps/grantAccess/, where remote authenticated attackers can spoof log entries via a crafted HTTP request. The issue is described as an improp...

CVE-2015-1311

CVE-2015-1311 affects SAP HANA Extended Application Services (XS). The XS component allows remote attackers to inject arbitrary ABAP code through unspecified vectors, per SAP Note 2098906 and corroborated by CNVD/NVD entries. This constitutes remote code/injection potential in SAP HANA XS, with n...

CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

DEBIAN-CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

CVE-2014-5173

SAP HANA Extend Application Services XS allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public...

CVE-2014-5171

SAP HANA Extend Application Services XS does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network...

CVE-2014-5171

SAP HANA Extend Application Services XS does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network...

CVE-2014-5173

CVE-2014-5173 concerns SAP HANA Extend Application Services (XS). The issue enables remote attackers to bypass access restrictions by issuing a request to a private IU5 SDK application that was once public. Documented impact is bypass of access controls; no exploit details or concrete remediation...

CVE-2014-5173

SAP HANA Extend Application Services XS allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public...

CVE-2014-5171

CVE-2014-5171 concerns SAP HANA Extend Application Services (XS). The issue is that transmissions for applications using SSL form-based authentication are not encrypted, enabling remote attackers to capture credentials and other sensitive data by sniffing the network. The affected component is th...

CVE-2014-5172: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-6311

Name of the Vulnerable Software and Affected Versions SAP HANA affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the XS Administration Tools. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...

CVE-2014-5173: Undefined Security Weakness

SAP HANA Extend Application Services XS allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public...

CVE-2014-5171: Undefined Security Weakness

SAP HANA Extend Application Services XS does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network...

phpBB XS <= 0.58 (functions.php) Remote File Include Vulnerability

No description provided by source. Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...