SAP BusinessObjects Business Intelligence Platform 安全漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

PT-2024-29646 · Sinec Nms · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V3.0 Description: A path traversal vulnerability has been identified in the importCertificate function of the SINEC NMS Control web application. This could allow an authenticated attacker to delete arbitrary...

PT-2024-12274 · Amd · Amd Μprof

Name of the Vulnerable Software and Affected Versions: AMD μProf affected versions not specified Description: The issue is due to insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf, which may allow an authenticated attacker to cause an out-of-bounds write. This...

SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server. An authenticated attacker could exploit the vulnerability to invoke underlying transactions, which could lead to the disclosure of user-related...

SAP CRM 代码问题漏洞

SAP CRM is a customer relationship management system from SAP, a German company. A code issue vulnerability exists in SAP CRM. An authenticated attacker could exploit this vulnerability to enumerate HTTP endpoints in the internal network via specially crafted HTTP requests...

PT-2024-5743

Name of the Vulnerable Software and Affected Versions Microsoft Azure Health Bot affected versions not specified Description The issue is related to insufficient validation of incoming requests in Microsoft Azure Health Bot, which can be exploited by an authenticated attacker to elevate privilege...

SAP BusinessObjects Business Intelligence Platform 代码问题漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

SAP Permit to Work 信息泄露漏洞

SAP Permit to Work is a systematic solution from SAP, Germany, that provides a secure and efficient way to control and perform operations and maintenance activities in the workplace. An information disclosure vulnerability exists in SAP Permit to Work that originates from allowing an authenticate...

AMD μProf 安全漏洞

AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. A security vulnerability exists in AMD μProf that stems from insufficient validation of the input buffer, which could allow an authenticated attacker to perform out-of-bounds writes, which could result in a crash of the...

PT-2024-8112

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V3.0 Description: The issue is related to insufficient validation of user input, which could allow an authenticated attacker to execute OS commands with elevated privileges. This is due to the affected application...

SAP BusinessObjects Business Intelligence Platform 代码问题漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

CVE-2024-41710

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 R6.4.0.136 could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter...

CVE-2024-33536

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0. The vulnerability occurs due to inadequate input validation of the res parameter, allowing an authenticated attacker to inject and execute arbitrary JavaScript code within the context of another user's browser session. By uploading...

PT-2024-6831 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform affected versions not specified Description: The issue is related to unrestricted file upload of dangerous file types. An authenticated attacker can upload malicious code over the network,...

Zimbra Collaboration Suite 安全漏洞

Zimbra Collaboration Suite ZCS is an open source collaboration suite from Zimbra. The product includes WebMail, Calendar, Address Book and more. A security vulnerability in Zimbra Collaboration Suite versions 9.0 and 10.0, which stems from insufficient input validation of the res parameter, allow...

PT-2024-29546 · Sap · Sap Permit To Work

Name of the Vulnerable Software and Affected Versions: SAP Permit to Work affected versions not specified Description: The issue allows an authenticated attacker to access information that would otherwise be restricted, causing low impact on the confidentiality of the application. There is no...

CVE-2024-33533

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0, issue 1 of 2. A reflected cross-site scripting XSS vulnerability has been identified in the Zimbra webmail admin interface. This vulnerability occurs due to inadequate input validation of the packages parameter, allowing an...

PT-2024-6832 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform affected versions not specified Description: The issue is related to unrestricted file upload of dangerous types. An authenticated attacker can upload malicious code over the network, which...

CVE-2024-33536

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0. The vulnerability occurs due to inadequate input validation of the res parameter, allowing an authenticated attacker to inject and execute arbitrary JavaScript code within the context of another user's browser session. By uploading...

PT-2024-6523 · Cisco · Cisco Expressway Edge

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Edge Expressway-E affected versions not specified Description: A vulnerability in Cisco Expressway Edge Expressway-E could allow an authenticated, remote attacker to masquerade as another user on an affected system. This issu...