2762 matches found
CVE-2024-42565
ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete...
Han ERP 安全漏洞
Han ERP is an ERP import/export system developed by Han Individual Developer. Han ERP has a security vulnerability that originates from the /index.php/basedata/inventory/delete?action=delete location contains a SQL injection vulnerability...
Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-40537)
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...
PT-2024-30102 · Huizhi · Huizhi
Name of the Vulnerable Software and Affected Versions: Huizhi enterprise resource management system versions 1.0 and earlier Description: The issue allows a local attacker to obtain sensitive information via the "/nssys/common/filehandle.aspx" component. A local attacker can exploit this to gain...
Huizhi enterprise resource management system 安全漏洞
Huizhi enterprise resource management system is an enterprise resource planning ERP system from Shenzhen Huizhi Software Development Co. A security vulnerability exists in Huizhi enterprise resource management system version v.1.0, which originates from the /nssys/common/filehandle.aspx component...
Mirai Botnet targeting OFBiz Servers Vulnerable to Directory Traversal
Enterprise Resource Planning ERP Software is at the heart of many enterprising supporting human resources, accounting, shipping, and manufacturing. These systems can become very complex and difficult to maintain. They are often highly customized, which can make patching difficult. However, critic...
UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-37708)
U8 cloud is a new-generation cloud ERP launched by UFIDA, focusing on growing and innovative enterprises and providing enterprise-level cloud ERP solutions. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to obtain sensitive information from the databas...
UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-37307)
U8 Cloud is an enterprise-class ERP used to help companies achieve efficient and digital business collaboration and process management. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by remote attackers to submit a special request and obtain sensitive database...
CVE-2024-41696
Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-41696
CVE-2024-41696 affects the PRI WEB Portal Add-On for Priority ERP on prem. The core issue is CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, indicating information disclosure. Based on the documents, affected software is the PRI WEB Portal Add-On component integrated with Pri...
CVE-2024-41696 Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-41696 Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...
PT-2024-29517 · Priority · Pri Web Portal Add-On For Priority Erp
Name of the Vulnerable Software and Affected Versions: PRI WEB Portal Add-On for Priority ERP on prem affected versions not specified Description: The issue concerns exposure of sensitive information to an unauthorized actor, as described by CWE-200. Recommendations: At the moment, there is no...
Priority 信息泄露漏洞
Priority is an ERP solution from Priority Israel. Priority suffers from an information disclosure vulnerability that originates from the disclosure of sensitive information to unauthorized actors...
Matrix Tafnit 跨站脚本漏洞
Matrix Tafnit is an enterprise resource planning solution from Matrix. A cross-site scripting vulnerability exists in Matrix Tafnit version v8, which stems from improper input neutralization during web page generation and is susceptible to cross-site scripting attacks...
Arbitrary File Read Vulnerability in Tianwen Property ERP System of Chengdu Tianwen Interconnection Technology Co. Ltd (CNVD-2024-36506)
Based on software development and technical services, Chengdu Tianwen Interlink Technology Co., Ltd. establishes property ERP application system and provides property management companies with intelligent property management solutions aiming at cost reduction, quality assurance and efficiency...
Dolibarr ERP CRM vulnerable to remote code execution (RCE)
Dolibarr ERP CRM before 19.0.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...
GHSA-VPRP-94P9-5JP8 Dolibarr ERP CRM vulnerable to remote code execution (RCE)
Dolibarr ERP CRM before 19.0.2 was discovered to contain a remote code execution RCE vulnerability via the Computed field parameter under the Users Module Setup function...