EUVD-2019-13665

Malware in sbrugna...

EUVD-2006-6973

Malware in sbrugna...

EUVD-2025-20336

Malicious code in bioql PyPI...

EUVD-2025-14347

Malicious code in bioql PyPI...

EUVD-2025-1495

Malicious code in bioql PyPI...

CVE-2019-0289

Under certain conditions SAP BusinessObjects Business Intelligence platform Analysis for OLAP, versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted...

Cross-Site Request Forgery (CSRF)

concrete5/concrete5 is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to insufficient sanitization and addresses not being properly sanitized in the output when a country is not specified. It allows an attacker with limited permissions to glean restricted information,...

CVE-2025-27430

SAP CRM and SAP S/4HANA (Interaction Center) are affected by a server-side request forgery (SSRF) vulnerability. The vulnerability allows an attacker with low privileges to access internal network resources, compromising confidentiality with no impact on integrity or availability. The CVSS 3.1 ve...

SAP BusinessObjects Business Intelligence Platform security vulnerabilities

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

PT-2024-9860

Name of the Vulnerable Software and Affected Versions: SAP Enable Now affected versions not specified Description: The issue is related to missing authorization checks in SAP Enable Now, allowing an author to escalate privileges and access restricted information. This can cause limited impact on...

CVE-2022-35290

Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted...

CVE-2022-22547

Simple Diagnostics Agent - versions 1.0 up to version 1.57., allows an attacker to access information which would otherwise be restricted via a random port 9000-65535. This allows information gathering which could be used exploit future open-source security exploits...

PT-2021-17556

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for Java versions 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 Description The issue allows attackers to access restricted information by entering a malicious server name in the UserAdmin application. Recommendations...

CVE-2020-6251

Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted...

PT-2019-11232

Name of the Vulnerable Software and Affected Versions: SAP Business One client versions prior to 9.2 SAP Business One client versions prior to 9.3 Description: The issue allows an attacker to access restricted information under certain conditions. Recommendations: For versions prior to 9.2, updat...

PT-2019-11219

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence platform Central Management Server versions 4.2 and 4.3 Description: The issue allows an attacker to access restricted information under certain conditions. Recommendations: For versions 4.2 and 4.3, ...

CVE-2019-0289: Undefined Security Weakness

Under certain conditions SAP BusinessObjects Business Intelligence platform Analysis for OLAP, versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted...

SAP Landscape Management Information Disclosure Vulnerability (CNVD-2019-04859)

SAP Landscape Management is a suite of business process solutions from SAP in Germany. The product is mainly used for the management of hybrid SAP environments. An information disclosure vulnerability exists in SAP Landscape Management, which can be exploited by remote attackers to access...

CVE-2019-0249

Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...

CVE-2018-19003

GE Mark VIe, EX2100e, EX2100eReg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100eReg All versions prior to v04.09.00C, and LS2100e All versions prior to v04.09.00C The affected versions of the application have a path traversal vulnerability that fail...