769 matches found
Shopware Input Validation Error Vulnerability
Shopware is a suite of open source e-commerce software from the German company Shopware. shopware has a security vulnerability and no details of the vulnerability are currently available...
Shopware code issue vulnerability (CNVD-2021-63766)
Shopware is a suite of open source e-commerce software from the German company Shopware. versions of Shopware prior to 6.4.3.1 are vulnerable to a code issue that allows an authenticated attacker to upload files via URL to trigger server-side request forgery. No detailed vulnerability details are...
SAP ERP 代码注入漏洞
SAP ERP is a series of software for ERP management from SAP, a German company. SAP ERP suffers from a code injection vulnerability that allows an attacker to bypass security policies and remotely execute arbitrary code...
OTRS Cross-Site Scripting Vulnerability (CNVD-2021-57225)
OTRS is an application of the German company OTRS. A cross-site scripting vulnerability exists in OTRS AG Time Accounting, which stems from the ability to inject malicious JS code into specific fields during the project creation screen. No details of the vulnerability are currently available...
Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2022-28452)
Open-Xchange OX App Suite is an e-mail client software from Open-Xchange Germany. Open-Xchange OX App Suite suffers from a security vulnerability, no details of the vulnerability are provided at this time...
Siemens Jt2go and Siemens Teamcenter Visualization Out-of-Bounds Writing Vulnerability (CNVD-2021-53355)
Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens, a German company. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. An out-of-bounds write vulnerability exists in Siemens JT2Go versions pri...
Siemens Jt2go and Siemens Teamcenter Visualization Out-of-Bounds Read Vulnerability (CNVD-2021-53347)
Siemens Jt2go and Siemens Teamcenter Visualization are both products of the German company Siemens. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. An out-of-bounds read vulnerability...
Siemens Jt2go and Siemens Teamcenter Visualization Out-of-Bounds Writing Vulnerability (CNVD-2021-53352)
Siemens Jt2go and Siemens Teamcenter Visualization are both products of the German company Siemens. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. An out-of-bounds write vulnerability...
Siemens Jt2go and Siemens Teamcenter Visualization Out-of-Bounds Writing Vulnerability (CNVD-2021-53346)
Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens, a German company. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. An out-of-bounds write vulnerability exists in Siemens JT2Go versions pri...
Siemens Jt2go and Siemens Teamcenter Visualization Buffer Over Read Vulnerability (CNVD-2021-53354)
Siemens Jt2go and Siemens Teamcenter Visualization are both products of the German company Siemens. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A buffer over-read vulnerability exis...
Bosch IP cameras input validation error vulnerability
Bosch IP cameras is a German Bosch web camera. Bosch IP cameras is vulnerable to an input validation error that could be exploited by an attacker to inject arbitrary HTTP request headers via a crafted URL...
StoreFront 1912 CU2 - Error when joining StoreFront cluster Event ID 1,2,4 with OS on languages French/German
ID 1,2,4 from Citrix Cluster Join Service in event viewer. The issue is only with SF 1912 LTSR CU1 or above. The issue is specifically with Server OS running language French/German non-english...
Ghostwriter Update: Cyber Espionage Group UNC1151 Likely Conducts Ghostwriter Influence Activity
In July 2020, Mandiant Threat Intelligence released a public report detailing an ongoing influence campaign we named “Ghostwriter.” Ghostwriter is a cyber-enabled influence campaign which primarily targets audiences in Lithuania, Latvia and Poland and promotes narratives critical of the North...
CVE-2020-6577
The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Cross-Site Scripting Vulnerability (CNVD-2021-56802)
MB CONNECT LINE mymbCONNECT24 is an internal remote maintenance solution for virtual environments from the German company MB CONNECT LINE Mb Connect Line. MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 are vulnerable to cross-site scripting. No detailed vulnerability details are currently availabl...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Trust Management Issue Vulnerability
MB CONNECT LINE mymbCONNECT24 is an internal remote maintenance solution for virtual environments from the German company MB CONNECT LINE Mb Connect Line. mb CONNECT LINE mymbCONNECT24 and mbCONNECT24 have a trust management issue Vulnerability. No detailed vulnerability details are currently...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Information Disclosure Vulnerability
MB CONNECT LINE mymbCONNECT24 is an internal remote maintenance solution for virtual environments from the German company MB CONNECT LINE Mb Connect Line. MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 is vulnerable to an information disclosure. An attacker could use this vulnerability to obtain...
Clop targets execs, ransomware tactics get another new twist
Ransomware peddlers have come up with yet another devious twist on the recent trend for data exfiltration. After interviewing several victims of the Clop ransomware, ZDNet discovered that its operators appear to be systematically targeting the workstations of executives. After all, the top manage...