797 matches found
CVE-2015-4945
IBM Maximo Anywhere 7.5.1 (Android) contains an unspecified vulnerability that could allow a remote attacker to bypass passcode protections and obtain sensitive information via a crafted application. Affects Maximo Anywhere 7.5.1; remediation available as 7.5.1.2 Interim Fix or Fix Pack via Fix C...
[ERPSCAN-15-010] SYBASE SQL Anywhere 12 and 16 - DoS
ERPSCAN Research Advisory ERPSCAN-15-010 SYBASE SQL Anywhere 12 and 16 - DoS Application: SYBASE SQL Anywhere 12 and 16 Versions Affected: SYBASE SQL Anywhere 12 and 16, probably others Vendor URL: http://SAP.com Bugs: DoS Sent: 09.12.2014 Reported: 09.12.2014 Vendor response: 10.12.2014 Date of...
[ERPSCAN-15-009] SAP Afaria 7 XcListener - Missing authorization check
ERPSCAN Research Advisory ERPSCAN-15-009 SAP Afaria 7 XcListener - Missing authorization check Application: SAP Afaria 7 Versions Affected: SAP Afaria 7, probably others Vendor URL: http://SAP.com Bugs: Missing authorization check Sent: 09.12.2014 Reported: 09.12.2014 Vendor response: 10.12.2014...
SAP SYBASE SQL Anywhere DoS
DoS on request processing...
CVE-2014-4882
Aptexx Resident Anywhere does not require authentication, which allows remote attackers to obtain sensitive information or modify data via a direct request...
CVE-2014-4882
CVE-2014-4882 affects Aptexx Resident Anywhere. The vulnerability is an authentication bypass where an unauthenticated remote attacker can access or modify data via a direct account URL, potentially exposing user name, contact, and payment-related information. CERT/CC details indicate sensitive d...
CVE-2014-4882
Aptexx Resident Anywhere does not require authentication, which allows remote attackers to obtain sensitive information or modify data via a direct request...
Aptexx Resident Anywhere Authentication Bypass Vulnerability
Aptexx Resident Anywhere is a property management software package. An authentication bypass vulnerability exists in Aptexx Resident Anywhere, which could be exploited by an attacker to perform unauthorized operations or obtain sensitive information...
Unspecified Denial of Service Vulnerability in SAP Sybase SQL Anywhere
SAP Sybase SQL Anywhere is a database application. SAP Sybase SQL Anywhere has an unspecified security vulnerability that allows remote attackers to submit a special request for a denial of service attack...
CVE-2015-2819
SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service crash via a crafted request, aka SAP Security Note 2108161...
Design/Logic Flaw
SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service crash via a crafted request, aka SAP Security Note 2108161...
CVE-2015-2819
SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service crash via a crafted request, aka SAP Security Note 2108161...
CVE-2015-2819
CVE-2015-2819 affects SAP Sybase SQL Anywhere 11 and 16. An anonymous, remotely exploitable DoS can be triggered by a crafted request, crashing the server. ERPScan’s advisory (ERPSCAN-15-010) and SAP Security Note 2108161 describe the vulnerability and remediation. A PoC is included in the adviso...
SAP SQL Anywhere .NET Data Provider Column Alias Buffer Overflow (CVE-2014-9264)
A buffer overflow vulnerability exists in SAP SQL Anywhere .NET Data Provider. The vulnerability is caused by insufficient boundary checks in the handling of column aliases. If an application allows untrusted input to be used as the column alias in an SQL query, by sending crafted requests to the...
Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow Vulnerability
Schneider Electric provides total solutions for the energy and infrastructure, industrial, data center and network, building and residential markets in more than 100 countries. A buffer overflow vulnerability in Schneider Electric Wonderware InTouch Access Anywhere Server's handling of non-existe...
CVE-2014-9190
Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist...
Stack overflow
Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist...
CVE-2014-9190 Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow
Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist...