590 matches found
CVE-2020-26825
SAP Fiori Launchpad News tile Application, versions - 750,751,752,753,754,755, allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code, to a different end user victim, because News tile does not sufficiently encode user controlled inputs, resulting ...
CVE-2020-26815
SAP Fiori Launchpad News tile Application, versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request to a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external...
CVE-2020-26815
CVE-2020-26815 concerns SAP Fiori Launchpad News tile Application, affected in versions 750–755. The connected sources describe a Server-Side Request Forgery (SSRF) vulnerability where an unauthenticated attacker can send a crafted request to a vulnerable web application, potentially exposing sen...
PT-2020-5887 · Openexr +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: The issue is related to a flaw in OpenEXR's deep tile sample size calculations, which can lead to an integer overflow and subsequently an out-of-bounds read when a crafted file is processed...
PT-2020-6260 · Openexr +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: OpenEXR version 2.3.0 Description: A head-based buffer overflow exists in the writeTileData function of OpenEXR that can cause a denial of service via a crafted EXR file. This issue is related to writing beyond the boundaries of a buffer...
OpenEXR: std:: vector out-of-bounds read and write in ImfTileOffsets.cpp
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp...
CVE-2020-1159
An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...
CVE-2020-1119
An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to...
PT-2020-6859 · Openexr +3 · Openexr +3
Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw found in the dataWindowForTile function of IlmImf/ImfTiledMisc.cpp can trigger an integer overflow when a crafted file is processed, leading to an out-of-bounds write on the heap. Th...
PT-2020-3900 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An elevation of privilege issue exists due to the way StartTileData.dll handles file creation in protected locations. This could allow an attacker to execute code with elevated permissions ...
The vulnerability of the Tile Server component of the Oracle Fusion Middleware MapViewer software allows a intruder to gain access to modify, add, or delete data.
The vulnerability of the Tile Server component of the Oracle Fusion Middleware MapViewer software relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...
The vulnerability of the Tile Server component of the Oracle Fusion Middleware MapViewer software allows a intruder to gain access to modify, add, or delete data.
The vulnerability of the Tile Server component of the Oracle Fusion Middleware MapViewer visualization software relates to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious actor to remotely access and modify, add, or delete data using the...
Unspecified Vulnerability in Oracle Fusion Middleware MapViewer Tile Server Component
Oracle Fusion Middleware MapViewer enables developers to integrate highly interactive maps and spatial analysis into business applications. A security vulnerability in the Tile Server component of Oracle Fusion Middleware MapViewer version 12.2.1.3.0 can be exploited by an attacker to compromise...
Unspecified Vulnerability in Oracle Fusion Middleware MapViewer Tile Server Component (CNVD-2020-41187)
Oracle Fusion Middleware MapViewer enables developers to integrate highly interactive maps and spatial analysis into business applications. A security vulnerability exists in the Tile Server component of Oracle Fusion Middleware MapViewer versions 12.2.1.3.0 and 12.2.1.4.0, which can be exploited...
CVE-2020-14607
Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware component: Tile Server. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
CVE-2020-14608
CVE-2020-14608 affects Oracle Fusion Middleware MapViewer Tile Server (version 12.2.1.3.0). The vulnerability allows unauthenticated network access via HTTP to compromise MapViewer, potentially enabling unauthorized creation, deletion or modification of data, and read access to data. The CVSS v3....
CVE-2020-14608
Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware component: Tile Server. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Fusion...
Industrial Light and Magic OpenEXR Buffer Overflow Vulnerability
Industrial Light and Magic LIM OpenEXR is an image file format for high dynamic range HDR images from Industrial Light and Magic LIM, USA. A buffer overflow vulnerability exists in the ImfTileOffsets.cpp file in versions of LIM OpenEXR prior to 2.4.1. The vulnerability stems from a networked syst...