CVE-2025-3767

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

CVE-2025-3767

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

CVE-2025-3767 SQL Injection in Centreon BAM boolean KPI listing

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

CVE-2025-3767

CVE-2025-3767 is an SQL Injection in Centreon BAM’s Boolean KPI Listing modules caused by improper neutralization of special elements in SQL commands. Affected: Centreon BAM versions 24.10 (before 24.10.1), 24.04 (before 24.04.5), 23.10 (before 23.10.10), and 23.04 (before 23.04.10). Root cause: ...

CVE-2025-3767 SQL Injection in Centreon BAM boolean KPI listing

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

CVE-2025-3767 SQL Injection in Centreon BAM boolean KPI listing

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...

Centreon BAM 安全漏洞

Centreon BAM is a monitoring module from Centreon France. A security vulnerability exists in Centreon BAM versions prior to 24.10.1 that stems from improper neutralization of special elements in SQL commands, which could lead to an SQL injection attack...

PT-2025-17547 · Centreon · Centreon Bam

Name of the Vulnerable Software and Affected Versions: Centreon BAM versions 23.04 through 23.04.9 Centreon BAM versions 23.10 through 23.10.9 Centreon BAM versions 24.04 through 24.04.4 Centreon BAM versions 24.10 through 24.10.0 Description: The issue is related to an SQL Injection vulnerabilit...

SUSE CVE-2022-49650

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: fix runtime PM underflow Commit dbad41e7bb5f "dmaengine: qcom: bamdma: check if the runtime pm enabled" caused unbalanced pmruntimeget/put calls when the bam is controlled remotely. This commit reverts it...

DEBIAN-CVE-2022-49650

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: fix runtime PM underflow Commit dbad41e7bb5f "dmaengine: qcom: bamdma: check if the runtime pm enabled" caused unbalanced pmruntimeget/put calls when the bam is controlled remotely. This commit reverts it...

UBUNTU-CVE-2022-49650

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: fix runtime PM underflow Commit dbad41e7bb5f "dmaengine: qcom: bamdma: check if the runtime pm enabled" caused unbalanced pmruntimeget/put calls when the bam is controlled remotely. This commit reverts it...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a runtime PM underflow in the qcom bamdma driver...

CVE-2024-45757

An issue was discovered in Centreon centreon-bam 24.04, 23.10, 23.04, and 22.10. SQL injection can occur in the user-settings form. Exploitation is only accessible to authenticated users with high-privileged access...

CVE-2024-45757

An issue was discovered in Centreon centreon-bam 24.04, 23.10, 23.04, and 22.10. SQL injection can occur in the user-settings form. Exploitation is only accessible to authenticated users with high-privileged access...

PT-2024-31753 · Centreon · Centreon Bam

Name of the Vulnerable Software and Affected Versions: Centreon centreon-bam versions 22.10 through 24.04 Description: A problem was discovered in the user-settings form of Centreon centreon-bam, where SQL injection can occur. The exploitation of this issue is only accessible to authenticated use...

PT-2024-40607 · Git +1 · Htslib

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported. The crash involves the following functions: cram encode container, cram flush container mt, and cr...

CVE-2024-24739 Missing authorization check in SAP BAM (Bank Account Management)

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

CVE-2024-24739

CVE-2024-24739 affects SAP Bank Account Management (BAM). The issue is a missing authorization check that permits an authenticated user with restricted access to execute functions that can escalate privileges. Impact is described as low for confidentiality, integrity, and availability. The availa...

CVE-2022-31528

The bonn-activity-maps/bamannotationtool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

bam-service.com Improper Access Control vulnerability OBB-2265276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...