CVE-2026-82915 Path Traversal in Bimser Solution Software's eBA Plus

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

CVE-2026-82915

The eBA Plus Document and Workflow Management System by Bimser Solution Software Trade Inc. is vulnerable to a Path Traversal vulnerability. This issue affects versions from 6.7.141 before 10.0.11 . The flaw allows for improper limitation of a pathname to a restricted directory. No specific explo...

CVE-2026-82915 Path Traversal in Bimser Solution Software's eBA Plus

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

CVE-2026-85134 Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...

CVE-2026-82969 Stored XSS in BİMSER's eBA Plus

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before...

CVE-2026-82915: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

CVE-2019-18916

A potential security vulnerability has been identified for HP LaserJet Solution Software for certain HP LaserJet Printers which may lead to unauthorized elevation of privilege on the client...

CVE-2019-18916

The CVE affects HP LaserJet Solution Software for certain HP LaserJet printers, where a flaw in the printer’s solution for setting user privileges may enable unauthorized elevation of privilege on the client (local access). HP has released updates; for example, HP Color LaserJet Pro MFP M277 mode...

PT-2021-9008

Name of the Vulnerable Software and Affected Versions HP LaserJet Solution Software affected versions not specified Description A potential security issue has been identified that may lead to unauthorized elevation of privilege on the client. Recommendations At the moment, there is no information...

CVE-2019-18916: Improper Privilege Management

A potential security vulnerability has been identified for HP LaserJet Solution Software for certain HP LaserJet Printers which may lead to unauthorized elevation of privilege on the client...

CVE-2020-3375: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected...

PT-2020-3470

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution Software affected versions not specified Description A buffer overflow issue in Cisco SD-WAN Solution Software is caused by insufficient input validation, allowing an unauthenticated, remote attacker to send crafted traff...

CVE-2020-3379: Improper Input Validation

A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted...

CVE-2020-3351: Uncontrolled Resource Consumption

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An attacker could exploit...

CVE-2020-3180: Insufficiently Protected Credentials

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software has a user account with a...

PT-2020-3115

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution Software affected versions not specified Description A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The issue is due to improp...

PT-2020-3125

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution Software affected versions not specified Description The issue is due to insufficient input validation, allowing an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system. ...

Notilus Travel Solution Software 2012 R3 - SQL Injection

Notilus Travel Solution Software 2012 R3 - SQL Injection Exploit Title: Notilus SQL injection Product: Notilus travel solution software Vulnerable Versions: 2012 R3 Tested Version: 2012 R3 Advisory Publication: 03/06/2016 Vulnerability Type: Improper Neutralization of Special Elements used in an...

Notilus 2012 R3 SQL Injection

Exploit Title: Notilus SQL injection Product: Notilus travel solution software Vulnerable Versions: 2012 R3 Tested Version: 2012 R3 Advisory Publication: 03/06/2016 Vulnerability Type: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' CWE-89 CVE Reference: NONE...