Arbitrary File Read Vulnerability in SAP EAP Enterprise Adaptation Management Platform

EAP Enterprise Adaptive Management Platform is an enterprise management software designed by Sap for the complexity and diversity of real estate enterprise management in China. EAP Enterprise Adaptation Management Platform has an arbitrary file reading vulnerability, which can be exploited by...

Information Leakage Vulnerability in Monarch LinkWorks Collaboration Platform

Ltd. is a digital construction platform service provider based on "end+cloud+big data" products/services, providing value-added services such as industrial big data and industrial new finance. An information leakage vulnerability exists in the Dream Dragon LinkWorks collaboration platform. An...

CVE-2019-11663

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

Design/Logic Flaw

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

Design/Logic Flaw

Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

CVE-2019-11664

Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

CVE-2019-11663

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

SQL Injection Vulnerability in in***.php of Chengdu Timeshift Technology Co.

Chengdu Times Huichuang Technology Co., Ltd. is an information technology service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. The standard website in.php of Chengdu Timeshift Technology Co., Ltd. has a SQL injection...

Sensitive Data Exposure in seneca

Versions of seneca prior to 3.9.0 are vulnerable to Sensitive Data Exposure. When a process using the package crashes all environment variables are printed. This may leak sensitive data such as access keys, especially given scenarios when log-monitoring systems store the error output...

CVE-2019-0352

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages like jsp are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout...

CVE-2019-5503

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

S-CMS government website builder system aj***.php page suffers from SQL injection vulnerability

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a special government station building solutions to provide products. S-CMS government website building system aj.php page SQL injection vulnerability, attackers can use the vulnerability to obtain...

S-CM e-commerce system aj***.php page P_sort parameter SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CM e-commerce system aj.php page Psort parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

Arbitrary File Download Vulnerability in Mobile Office Portal KK System

BlueLine is a large-platform OA service provider and knowledge management solution provider, a national high-tech enterprise engaged in knowledge-based consulting, software development, implementation and technical services for organizations. An arbitrary file download vulnerability exists in the...

Sensitive Data Exposure

Overview Versions of seneca prior to 3.9.0 are vulnerable to Sensitive Data Exposure. When a process using the package crashes all environment variables are printed. This may leak sensitive data such as access keys, especially given scenarios when log-monitoring systems store the error output...

CVE-2019-14339

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the...

SQL Injection Vulnerability in Yinda Hui Zhi An School Easy Intelligent Integrated Management Platform

Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform is a comprehensive campus information management system, the business includes campus card, attendance, access and so on. There is a SQL injection vulnerability in Yinda Hui Zhi Anshu Yi Intelligent Integrated Management...

SQL Injection Vulnerability in the 'nrfl' Parameter of the APP Interface of Mobile Phone Letter (Mass Version)

Jiangsu Chuhuai Software Technology Development Co., Ltd. is a high-tech industry software company integrating software development, system integration and informationization construction. There is a SQL injection vulnerability in the Mobile Letter and Visit Mass Version APP, which can be exploit...

SQL Injection Vulnerability in the Frontend of Tongda OA System of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

Unauthorized Access Vulnerability in the Frontend of Smartstone Online Training and Learning System of Shijiazhuang Lingstone Technology Co.

Smartstone Online Training and Learning System is an online learning platform that integrates both passive training and active learning modes and supports multi-level authorization management. There is an unauthorized access vulnerability in the frontend of Smartstone Online Training and Learning...