AUVESY Versiondog 安全漏洞

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A security vulnerability exists in AUVESY Versiondog, which could be exploited by attackers to gain SYSDBA privileges...

Microsoft Office缓冲区错误漏洞

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A buffer overflow vulnerability exists in AUVESY Versiondog, which can be exploited by attackers to cause a stack overflow...

AUVESY Versiondog 安全漏洞

AUVESY Versiondog is an automated production data and change management software solution from AUVESY Germany. a security vulnerability exists in AUVESY Versiondog that could be exploited by an attacker to rewrite memory anywhere in the affected product...

AUVESY Versiondog 安全漏洞

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A security vulnerability exists in AUVESY Versiondog that could be exploited by an attacker to cause the manipulation and/or deletion of files...

CVE-2021-39189

Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually...

Default credentials

Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually...

CVE-2021-39189 Observable Response Discrepancy in Lost Password Service

Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually...

CVE-2021-39189

Pimcore before version 10.1.3 is vulnerable to username enumeration through the forgot-password feature, enabling an attacker to infer valid usernames. The root cause is an observable response discrepancy in the lost-password flow. The issue is addressed in Pimcore 10.1.3; a patch can be applied ...

Unable to see the analytics on ADM

Analytics data not visible on ADM...

Pimcore Cross-Site Scripting Vulnerability (CNVD-2021-93906)

Pimcore is a comprehensive open source enterprise platform for master data management PIM/MDM, user experience management CMS/UX, digital asset management DAM, and e-commerce. cross-site scripting vulnerabilities exist in versions of Pimcore prior to 10.1.2. The vulnerability stems from text valu...

CVE-2021-39166

Pimcore is an open source data & experience management platform. Prior to version 10.1.2, text-values were not properly escaped before printed in the version preview. This allowed XSS by authenticated users with access to the resources. This issue is patched in Pimcore version 10.1.2...

Code injection

Pimcore is an open source data & experience management platform. Prior to version 10.1.2, an authenticated user could add XSS code as a value of custom metadata on assets. There is a patch for this issue in Pimcore version 10.1.2. As a workaround, users may apply the patch manually...

CVE-2021-39170

Pimcore before version 10.1.2 is vulnerable to an XSS issue in asset metadata: an authenticated user could inject script via custom metadata values. Root cause is improper encoding/escaping in the Asset Metadata Component. A patch exists in Pimcore 10.1.2; a manual workaround is also available to...

CVE-2021-39166

PIMcore version prior to 10.1.2 is vulnerable to cross-site scripting via text-values not being properly escaped in the version preview, exploitable by authenticated users with access to resources. The issue has a fix in Pimcore 10.1.2; upgrading to 10.1.2 or later mitigates the vulnerability. No...

B. Braun SpaceCom2 访问控制错误漏洞

B. Braun SpaceCom2, a hardware device from B. Braun, is used to connect to external devices to record data in a patient data management system, PC or USB stick.An access control error vulnerability exists in previous versions of B. Braun SpaceCom2 012U000062, which stems from a lack of...

B.Braun SpaceCom2 数据伪造问题漏洞

The B. Braun SpaceCom2 is a hardware device from B. Braun Germany designed to connect to external devices to record data in a patient data management system, PC, or USB memory stick. A security vulnerability exists in versions prior to B. Braun SpaceCom2 012U000062, which arises from insufficient...

CVE-2021-37702

Pimcore is an open source data & experience management platform. Prior to version 10.1.1, Data Object CSV import allows formular injection. The problem is patched in 10.1.1. Aside from upgrading, one may apply the patch manually as a workaround...

CVE-2021-37702

Pimcore CVE-2021-37702 affects Pimcore before version 10.1.1, where Data Object CSV import allows formula injection. The issue is fixed in 10.1.1; remediation options include upgrading to 10.1.1 or applying the patch manually. The vulnerability stems from improper handling in CSV import that can ...

How to capture trace on ADM

How to capture trace on ADM...

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to access confidential information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...