Oracle Hyperion Essbase Administration Services has an unspecified vulnerability (CNVD-2021-56441)

Oracle Hyperion Essbase Administration Services is a robust, cross-platform graphical user interface that makes Essbase administration tasks easy to perform.Oracle Hyperion Essbase Administration Services 11.1.2.4. Release 21.2 contains a security vulnerability in the EAS Console component. An...

Oracle Hyperion Essbase Administration Services has an unspecified vulnerability (CNVD-2021-56440)

Oracle Hyperion Essbase Administration Services is a robust, cross-platform graphical user interface that makes Essbase administration tasks easy to perform.Oracle Hyperion Essbase Administration Services 11.1.2.4. Release 21.2 contains a security vulnerability in the EAS Console component. An...

CVE-2021-2350

CVE-2021-2350 affects Oracle Hyperion Essbase Administration Services (EAS Console). The vulnerability impacts Essbase 11.1.2.4 and 21.2, allowing an unauthenticated attacker with network access over HTTP to compromise EAS and gain unauthorized access to data or full EAS data. Documented base sco...

CVE-2021-2349

CVE-2021-2349 affects Oracle Hyperion Essbase Administration Services (EAS Console). Affected are 11.1.2.4 and 21.2. The flaw allows an unauthenticated attacker with network access via HTTP to compromise EAS, potentially leading to unauthorized access to all EAS data. CVSSv3.1 base score is 8.6 (...

CVE-2021-2349

Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2021-2349

Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

Oracle Essbase 输入验证错误漏洞

Oracle Hyperion Essbase Administration Services is a robust, cross-platform graphical user interface that makes Essbase administration tasks easy to perform.Oracle Hyperion Essbase Administration Services 11.1.2.4. Release 21.2 contains a security vulnerability in the EAS Console component. An...

Catalog Traversal Vulnerability in Kingdee EAS

Kingdee EAS is a very good business management software. A directory traversal vulnerability exists in Kingdee EAS, which can be exploited by an attacker to obtain sensitive server information...

Arbitrary File Read Vulnerability in Kingdee EAS

Based on cloud computing technology, Kingdee EAS provides integrated and intelligent business solutions for large group enterprises. There is an arbitrary file read vulnerability in Kingdee EAS, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Kingdee EAS

Based on cloud computing technology, Kingdee EAS provides integrated and intelligent business solutions for large group enterprises. A command execution vulnerability exists in Kingdee EAS, which can be exploited by an attacker to obtain server control privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android suffers from a security vulnerability that stems from a lack of bounds checking in Parseins in easmdls.c, which may write out of bounds. This could lead to the disclosure of...

File Upload Vulnerability in Kingdee EAS Cloud

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. A file upload vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to gain control of the server...

Kingdee EAS Cloud suffers from information leakage vulnerability (CNVD-2021-09697)

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. Information leakage vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to obtain sensitive information...

Directory Traversal Vulnerability in Kingdee EAS Cloud

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. A directory traversal vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to obtain sensitive information...

Information Leakage Vulnerability in Kingdee EAS Cloud

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. Information leakage vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to obtain sensitive information...

CVE-2020-0489

In Parsedata of easmdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android...

CVE-2020-0171

In Parselart of easmdls.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127313223...

CVE-2020-0169

In RTTTLEvent of easrtttl.c, there is possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123700383...

CVE-2017-18695

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. Attackers who control a certain subdomain can discover a user's credentials, during an email account login, via an EAS autodiscover packet. The Samsung ID is SVE-2016-7654 January 2017...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. Attackers who control a certain subdomain can discover a user's credentials, during an email account login, via an EAS autodiscover packet. The Samsung ID is SVE-2016-7654 January 2017...