11483 matches found
CVE-2021-33690
Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...
CVE-2021-33690
Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...
CVE-2021-33691
NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability.SAP NetWeaver Development Infrastructure Notification Service allows a threat actor to send crafted scripts to a victim. If the victim ha...
CVE-2021-33690
Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...
Critical Flaws Discovered in Azure App That Microsoft Secretly Installs on Linux VMs
Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well as allow for remote takeover of vulnerable systems. The list of flaws, collectively called OMIGOD by...
CVE-2021-33691
The CVE-2021-33691 issue affects SAP NetWeaver Development Infrastructure (NWDI) Notification Service, specifically versions 7.31, 7.40, and 7.50. The root cause is insufficient encoding of user-supplied inputs, which enables Cross-Site Scripting (XSS). A threat actor could send crafted scripts t...
CVE-2021-33690
SAP NetWeaver Development Infrastructure Component Build Service (NWDI Build Service) versions 7.11–7.50 are affected by a Server-Side Request Forgery (SSRF) vulnerability. The issue allows an attacker with server access to perform proxy requests, potentially exposing sensitive data and affecting...
Attackers Impersonate DoT in Two-Day Phishing Scam
Threat actors impersonated the U.S. Department of Transportation USDOT in a two-day phishing campaign that used a combination of tactics – including creating new domains that mimic federal sites so as to appear to be legitimate – to evade security detections. Between Aug. 16-18, researchers at...
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability...
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability...
CVE-2021-38647
Open Management Infrastructure OMI Remote Code Execution Vulnerability...
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability...
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability...
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability...
Remote code execution
Open Management Infrastructure Remote Code Execution Vulnerability...
Privilege escalation
Open Management Infrastructure Elevation of Privilege Vulnerability...
Privilege escalation
Open Management Infrastructure Elevation of Privilege Vulnerability...
Privilege escalation
Open Management Infrastructure Elevation of Privilege Vulnerability...
Security Bulletin: Vulnerability in Tivoli LWI impacts pConsole and WebSM for AIX (CVE-2016-6038)
Summary A directory traversal vulnerability in the Eclipse Help component shipped by the Tivoli Lightweight Infrastructure LWI allows remote attackers to read arbitrary files via a crafted URL. This vulnerability affects IBM System Director Console for AIX pConsole and Web Based System Management...
