10095 matches found
PT-2020-19015
Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform BI Launchpad version 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a reflected Cross-Site Scripting XSS vulnerability. This means that ...
PT-2020-19010
Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform AdminTools versions 4.1, 4.2 Description The issue allows an attacker to redirect users to a malicious site due to insufficient URL validation, potentially leading to the theft of victim...
PT-2020-19020
Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface versions 4.1, 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability...
PT-2020-2248
Name of the Vulnerable Software and Affected Versions Windows Graphics Component affected versions not specified Description The issue is related to the improper handling of objects in memory by the Windows Graphics Component, which can lead to an elevation of privilege. This can potentially allo...
CVE-2020-6219: Deserialization of Untrusted Data
SAP Business Objects Business Intelligence Platform CrystalReports WebForm Viewer, versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic authorization to perform deserialization attack in the application, leading to service interruptions and denial of service a...
CVE-2020-6195: Cleartext Transmission of Sensitive Information
SAP Business Objects Business Intelligence Platform CMC, version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to gain access to system and If password is known, it would give administrative rights to the attacker to...
CVE-2020-6211: URL Redirection to Untrusted Site
SAP Business Objects Business Intelligence Platform AdminTools, versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability...
Security Updates for Microsoft Excel Products (April 2020)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data...
PT-2020-19029
Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface version 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. This allows for...
Information Disclosure
auth0.js is vulnerable to information disclosure. Error objects are returned by the library containing confidential information such as the original request of the user or the plaintext password entered by the user...
Same-Origin Policy Bypass
firefox is vulnerable to Same-Origin policy bypass. A flaw was found in the way Firefox handled frame objects with certain names. An attacker could use this flaw to cause a plug-in to grant its content access to another site or the local file system, violating the same-origin policy...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists as two use-after-free flaws were found in the Firefox mObserverList and mChannel objects. Malicious content could use these flaws to execute arbitrary code with the privileges of the user running Firefox...
Arbitrary Code Execution
java is vulnerable to arbitrary code execution. The vulnerability exists as the flaws in the CORBA implementation could allow an attacker to execute arbitrary code by misusing permissions granted to certain system objects...
Integer Overflows
WebKitGTK+ is vulnerable to integer overflows. It is due to a flaw in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari , allowing remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving Text objects...
Denial Of Service (DoS)
squid is vulnerable to denial of service. A flaw was found in the way squid stored HTTP headers for cached objects in system memory. An attacker could cause squid to use additional memory, and trigger high CPU usage when processing requests for certain cached objects, possibly leading to a denial...
Update Rollup 13 for System Center 2012 R2 Operations Manager
Update Rollup 13 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Operations Manager. This article also contains the installation instructions for this update. Issues that are fixed...
November 11, 2014 update for PowerPoint 2007 (KB2597972)
November 11, 2014 update for PowerPoint 2007 KB2597972 This article describes update KB2597972 for Microsoft PowerPoint 2007 that was released on November 11, 2014. This update improves the user experience in Office 2010 for when you use OLE objects in an Office 2010 application. How to download...
CVE-2020-11630
The CVE-2020-11630 issue affects EJBCA: versions before 6.15.2.6 and 7.x before 7.3.1.2. The root cause is improper verification during deserialization of serialized objects exchanged between nodes over the Peers protocol, allowing insecure objects to be deserialized. This addresses a high-severi...
