PT-2020-19025

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform version 4.2 Description The issue allows an attacker to send specially crafted GIOP packets to several services due to Improper Input Validation, enabling the forging of additional entries in...

PT-2020-2282

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to the way the VBScript engine handles objects in memory. This could allow an attacker to execute arbitrary code in the context of the curre...

PT-2020-19021

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform versions 4.1, 4.2 Description The issue allows an attacker to modify certain error pages to include malicious content, potentially misdirecting users who access these error pages rendered by...

PT-2020-18997

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform CMC versions 4.1, 4.2 Description The issue involves the disclosure of cleartext passwords in responses, potentially leading to information disclosure. This could be exploited through social...

PT-2020-19024

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface version 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability. This...

PT-2020-19015

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform BI Launchpad version 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a reflected Cross-Site Scripting XSS vulnerability. This means that ...

PT-2020-19018

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform CrystalReports WebForm Viewer versions 4.1 through 4.2 Crystal Reports for VS version 2010 Description The issue allows an attacker with basic authorization to perform a deserialization attac...

Security Updates for Microsoft Excel Products (April 2020)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data...

PT-2020-2048

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A denial of service issue exists due to improper handling of objects in memory. This could allow an attacker to cause a denial of service. Recommendations At the moment, there is no informati...

PT-2020-2050

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Components affected versions not specified Description A remote code execution issue exists in the way Microsoft Graphics Components handle objects in memory. This allows remote attackers to execute arbitrary code and affect...

PT-2020-19019

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform versions 4.1, 4.2 Description The Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform does not sufficiently encode user-controlled inputs, resulting in a...

Information Disclosure

auth0.js is vulnerable to information disclosure. Error objects are returned by the library containing confidential information such as the original request of the user or the plaintext password entered by the user...

Same-Origin Policy Bypass

firefox is vulnerable to Same-Origin policy bypass. A flaw was found in the way Firefox handled frame objects with certain names. An attacker could use this flaw to cause a plug-in to grant its content access to another site or the local file system, violating the same-origin policy...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as two use-after-free flaws were found in the Firefox mObserverList and mChannel objects. Malicious content could use these flaws to execute arbitrary code with the privileges of the user running Firefox...

Arbitrary Code Execution

java is vulnerable to arbitrary code execution. The vulnerability exists as the flaws in the CORBA implementation could allow an attacker to execute arbitrary code by misusing permissions granted to certain system objects...

Integer Overflows

WebKitGTK+ is vulnerable to integer overflows. It is due to a flaw in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari , allowing remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving Text objects...

Denial Of Service (DoS)

squid is vulnerable to denial of service. A flaw was found in the way squid stored HTTP headers for cached objects in system memory. An attacker could cause squid to use additional memory, and trigger high CPU usage when processing requests for certain cached objects, possibly leading to a denial...

Update Rollup 13 for System Center 2012 R2 Operations Manager

Update Rollup 13 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Operations Manager. This article also contains the installation instructions for this update. Issues that are fixed...

November 11, 2014 update for PowerPoint 2007 (KB2597972)

November 11, 2014 update for PowerPoint 2007 KB2597972 This article describes update KB2597972 for Microsoft PowerPoint 2007 that was released on November 11, 2014. This update improves the user experience in Office 2010 for when you use OLE objects in an Office 2010 application. How to download...

CVE-2020-11630

The CVE-2020-11630 issue affects EJBCA: versions before 6.15.2.6 and 7.x before 7.3.1.2. The root cause is improper verification during deserialization of serialized objects exchanged between nodes over the Peers protocol, allowing insecure objects to be deserialized. This addresses a high-severi...