34 matches found
EUVD-2010-0716
Malware in sbrugna...
EUVD-2011-5058
Malware in sbrugna...
EUVD-2003-1159
Malware in sbrugna...
EUVD-2023-37550
Malicious code in bioql PyPI...
CVE-2023-33387
A reflected cross-site scripting XSS vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link...
CVE-2011-5158
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...
CVE-2023-33387
A reflected cross-site scripting XSS vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link...
CVE-2023-33387
A reflected cross-site scripting XSS vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link...
Cross site scripting
A reflected cross-site scripting XSS vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link...
CVE-2023-33387
A reflected cross-site scripting XSS vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link...
CVE-2023-33387
CVE-2023-33387 is a reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus, affected versions 15.1.0 through 16.1.1 P4. The flaw enables an attacker to steal targeted users’ login data by enticing them to click a crafted link. The CVE has a ...
DATEV eG Personal-Management System 跨站脚本漏洞
DATEV eG Personal-Management System is a personnel management system from DATEV, Inc. A security vulnerability exists in DATEV eG Personal-Management System Comfort/Comfort Plus versions v15.1.0 through v16.1.1. An attacker could exploit the vulnerability by sending a specially crafted link to...
CVE-2023-33387
A reflected cross-site scripting XSS vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link...
PT-2023-24328 · Datev Eg · Datev Eg Personal-Management System Comfort/Comfort Plus
Name of the Vulnerable Software and Affected Versions: DATEV eG Personal-Management System Comfort/Comfort Plus versions 15.1.0 through 16.1.1 P4 Description: A reflected cross-site scripting issue allows attackers to steal targeted users' login data by sending a crafted link. Recommendations: Fo...
CVE-2023-33387: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link...
PT-2021-23296
Name of the Vulnerable Software and Affected Versions Update Manager versions 5.8.0.2300 and earlier DFL versions 12.5.1001.5 and earlier Description The issue is related to insecure permissions in certain components of DATEV programs v14.1, allowing an attacker to escalate privileges due to...
DATEV Nutzungskontrolle 2.1/2.2 Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8950/info It has been reported that DATEV Nutzungskontrolle may be prone to a access validation issue that may allow a local attacker to gain access to sensitive data. The issue presents itself as a local user is able...
CVE-2011-5158
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...
Design/Logic Flaw
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...
CVE-2011-5158
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...