UBUNTU-CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...

OMPL 安全漏洞

OMPL is an open source motion planning library from OMPL. A security vulnerability exists in OMPL v1.5.0, which stems from a memory leak in LazyPRM.cpp...

The vulnerability of the User Interface sub-component of the Oracle Collaborative Planning component of the Oracle E-Business Suite allows a perpetrator to access and modify data.

The vulnerability of the User Interface sub-component of the Oracle Collaborative Planning product, a business automation system within the Oracle E-Business Suite, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to...

多款SAP产品安全漏洞

SAP ERP and others are products of SAP, a German company.SAP ERP is a series of software for ERP management.SAP Financials is a financial system.SAP S/4Hana Core is a complete and modular cloud ERP software.SAP ERP, SAP Financials, and SAP S/4Hana Core are products of SAP, a German company. A...

OTRS 安全漏洞

OTRS is an application from the German company OTRS. A service management software. A security vulnerability exists in OTRS versions 8.0.x through 8.0.23 and OTRS versions 7.0.x through 7.0.35, as well as OTRSCalendarResourcePlanning versions 8.0.x through 8.0.23 and 7.0.x through 7.0.31, which...

FacturaScripts 跨站脚本漏洞

FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in FacturaScripts versions prior to 2022.06, which can be exploited by an attacker to execute JavaScript code on the client side...

Dolibarr 跨站脚本漏洞

Dolibarr is an ERP/CRM system with plug-and-play modules and a well-established ecosystem with customizations and service providers worldwide. version 12.0.5 of Dolibarr suffers from a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting XSS attacks...

Avantune Genialcloud ProJ 跨站脚本漏洞

Avantune Genialcloud ProJ is a cloud-based ERP platform from Avantune Canada. version 10 of Avantune Genialcloud ProJ is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to inject and execute arbitrary web scripts or HTML via a crafted payload...

The vulnerability of the Microsoft Dynamics 365 resource planning software server allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software server relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Security Bulletin: IBM Planning Analytics Workspace is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Planning Analytics Workspace is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a...

CVE-2022-28930

ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml...

Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22950, XFID:217968)

Summary IBM Planning Analytics Workspace is affected by multiple vulnerabilites. Spring is used in IBM Planning Analytics Workspace in Server Side Rest APIs as an indirect dependency by MongoDB that is used to store content CVE-2022-22950. FasterXML jackson-databind is used in IBM Planning...

DEBIAN-CVE-2021-42218

OMPL v1.5.2 contains a memory leak in VFRRT.cpp...

UBUNTU-CVE-2021-42218

OMPL v1.5.2 contains a memory leak in VFRRT.cpp...

The Open Motion Planning Library安全漏洞

The Open Motion Planning Library OMPL is a collection of sampling-based motion planning algorithms. A security vulnerability exists in version v1.5.2 of The Open Motion Planning Library, which stems from a memory leak contained in VFRRT.cpp...

Orlansoft ERP 代码问题漏洞

Orlansoft ERP is an RRP system. Orlansoft ERP has a security vulnerability that stems from insecure deserialization of user-supplied content. An attacker can execute arbitrary code via a carefully crafted serialized Java object...

[eBook] Your First 90 Days as MSSP: 10 Steps to Success

Bad actors continuously evolve their tactics and are becoming more sophisticated. Within the past couple of years, we've seen supply chain attacks that quickly create widespread damage throughout entire industries. But the attackers aren't just focusing their efforts on supply chains. For example...

IBM Planning Analytics Workspace文件上传漏洞

IBM Planning Analytics is a business planning and analysis solution from IBM Corporation. Planning Analytics Workspace is the Web management interface for IBM Planning Analytics. IBM Planning Analytics Workspace version 2.0 contains a file upload vulnerability that stems from a failure to Validat...

IBM Planning Analytics Arbitrary File Upload Vulnerability

IBM Planning Analytics is a business planning and analysis solution from IBM Corporation in the United States. IBM Planning Analytics has an arbitrary file upload vulnerability that can be exploited to upload arbitrary executable files, leading to code execution...

CVE-2022-22392

IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 222066...