Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. A malicious read operation in the function DJVU::DataPool::hasdata, through a crafted djvu file, may cause the application to crash and lead to other issues...

EUVD-2014-3942

Malware in sbrugna...

CVE-2025-57248

A null pointer dereference vulnerability exists in SumatraPDF version 3.5.2 . The flaw occurs within the libmupdf.dll component, specifically in the DataPool::has_data() function, when the application processes a specially crafted .djvu file. An attacker can trigger an application crash by tricki...

SoftIron HyperCloud 安全漏洞

SoftIron HyperCloud is an intelligent cloud architecture from SoftIron. A security vulnerability exists in SoftIron HyperCloud version 2.3.0 through versions prior to 2.5.0. An attacker exploiting this vulnerability could affect the performance and availability of the back-end software-defined...

Unauthorized Access Vulnerability in Sidi's Data Pool Management Platform

Suzhou Sidi Information Technology Co., Ltd. is a company that specializes in transmission devices, fire information servers, and protocol converters. An unauthorized access vulnerability exists in the Sidi data pool management platform, which can be exploited by attackers to obtain sensitive...

Unauthorized Access Vulnerability in Sidi's Data Pool Management Platform (CNVD-2021-51916)

Suzhou Sidi Information Technology Co., Ltd. is a company that specializes in transmission devices, fire information servers, and protocol converters. An unauthorized access vulnerability exists in the Sidi data pool management platform, which can be exploited by attackers to obtain sensitive...

DEBIAN-CVE-2021-32492

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32492

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and other consequences...

PT-2021-3122

Name of the Vulnerable Software and Affected Versions djvulibre versions 3.5.28 and earlier Description A flaw was found in the djvulibre library, specifically in the DJVU::DataPool::has data function, which can lead to an out of bounds read when processing a crafted djvu file. This may cause an...

[Onapsis Security Advisories] Multiple Hard-coded Usernames in SAP Components

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisories:Multiple Hard-coded Usernames CWE-798 have been found and patched in a variety of SAP components. Summaries of the advisories with links to full versions follow: 1. ONAPSIS-2014-011-SAP Project System Structures and...

CVE-2014-4010

SAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-4010

The vulnerability CVE-2014-4010 affects SAP Transaction Data Pool, which contains hardcoded credentials. The root cause is hardcoded credentials enabling remote attackers to obtain access via unspecified vectors. The NVD entry assigns a CVSS v2 base score of 5.0 (Medium) with Network attack vecto...

CVE-2014-4010

SAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

PT-2014-5672

Name of the Vulnerable Software and Affected Versions SAP Transaction Data Pool affected versions not specified Description The issue concerns hardcoded credentials in SAP Transaction Data Pool, making it easier for remote attackers to gain access through unspecified vectors. Recommendations At t...

CVE-2014-4010: Undefined Security Weakness

SAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...