CVE-2021-33670: Undefined Security Weakness

SAP NetWeaver AS for Java Http Service Monitoring Filter, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to deni...

PT-2021-20248

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for Java versions 7.10 through 7.50 Description: The issue allows an attacker to send multiple HTTP requests with different method types, thereby crashing the filter and making the HTTP server unavailable to other legitimate...

CVE-2010-3300

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks...

CVE-2010-3300: Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks...

PT-2021-8338

Name of the Vulnerable Software and Affected Versions OWASP ESAPI for Java versions up to 2.0 RC2 Description The issue concerns padding oracle attacks. It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to these attacks. Recommendations For OWASP ESAPI for Java...

PT-2021-17556

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for Java versions 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 Description The issue allows attackers to access restricted information by entering a malicious server name in the UserAdmin application. Recommendations...

PT-2021-17570

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS for JAVA versions 7.20, 7.30, 7.31, 7.40, 7.50 Description The issue allows an attacker, authenticated as an administrator, to submit a specially crafted XML file due to missing XML validation. This enables the attacker to ful...

CVE-2021-27635: Improper Restriction of XML External Entity Reference

SAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker authenticated as an administrator to connect over a network and submit a specially crafted XML file in the application because of missing XML Validation, this vulnerability enables attacker to fully compromise...

CVE-2021-27621: Undefined Security Weakness

Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7.40 and 7.50 allows attackers to access restricted information by entering malicious server name...

Security Bulletin: Security vulnerability in IBM Jazz Team Server affects multiple IBM Rational products based on IBM Jazz technology (CVE-2014-2421, CVE-2013-6954, CVE-2013-6629, CVE-2014-0411, CVE-2014-0416)

Summary Security vulnerabilities have been identified in the IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Collaborative Lifecycle Management CLM, Rational Requirements Composer RRC, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manage...

CVE-2021-2302: Undefined Security Weakness

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: OPSS. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2021-15345

Name of the Vulnerable Software and Affected Versions Oracle Platform Security for Java versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java, potentially resulting in a...

CVE-2021-28472

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28472 Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

EUVD-2021-15150

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-27601

SAP NetWeaver AS Java Applications based on HTMLB for Java allows a basic-level authorized attacker to store a malicious file on the server. When a victim tries to open this file, it results in a Cross-Site Scripting XSS vulnerability and the attacker can read and modify data. However, the attack...

PT-2021-14551

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for Java affected versions not specified Description The issue allows an unauthorized attacker to trick an administrator into invoking telnet commands on the SAP NetWeaver Application Server for Java, potential...

Security Update for Microsoft Visual Studio Code Maven for Java Extension (April 2021)

The Microsoft Visual Studio Code Maven for Java Extension is prior to version 0.29.0. It is, therefore, affected by a remote code execution vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code, which stems from a remote code execution vulnerability in Visual Studio Code Maven Extension for Java. The following products and...

PT-2021-2741 · Microsoft · Vscode-Maven

Name of the Vulnerable Software and Affected Versions: Maven for Java Extension vscode-maven versions affected versions not specified Description: The issue is related to incorrect code generation management in the Maven for Java Extension for Microsoft Visual Studio Code. Exploitation of this...