EUVD-2011-2136

Malware in sbrugna...

CVE-2025-27432 Missing Authorization check in SAP Electronic Invoicing for Brazil (eDocument Cockpit)

The eDocument Cockpit Inbound NF-e in SAP Electronic Invoicing for Brazil allows an authenticated attacker with certain privileges to gain unauthorized access to each transaction. By executing the specific ABAP method within the ABAP system, an unauthorized attacker could call each transaction an...

CVE-2024-29732

A SQL Injection has been found on SCANVISIO eDocument Suite Web Viewer of Abast. This vulnerability allows an unauthenticated user to retrieve, update and delete all the information of database. This vulnerability was found on login page via "user" parameter...

CVE-2024-29732 SQL Injection vulnerability on SCAN_VISIO eDocument Suite Web Viewer from Abast

A SQL Injection has been found on SCANVISIO eDocument Suite Web Viewer of Abast. This vulnerability allows an unauthenticated user to retrieve, update and delete all the information of database. This vulnerability was found on login page via "user" parameter...

CVE-2024-29732

CVE-2024-29732 concerns the Abast SCAN_VISIO eDocument Suite Web Viewer. The vulnerability affects the login page through the user parameter, enabling an unauthenticated user to retrieve, update, and delete all database information via SQL injection. Reported impact is high/confidentiality, integ...

Code injection

The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service batch abort via a long subject line in an e-mail message that is represented in a .eml file...

CVE-2011-2144

The CVE-2011-2144 entry affects IBM Datacap Taskmaster Capture prior to and including 8.0.1 FP1, in the eDocument Conversion Actions component. The vulnerability allows remote attackers to cause a denial of service (batch abort) by sending a long subject line in an e-mail message represented in a...

Remote file inclusion

PHP remote file inclusion vulnerability in METAjour 2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the 1 systempath parameter in a large number of files in the a app/edocument/, b app/eproject/, c app/erek/, and d extension/ directories, and the 2...