120 matches found
CVE-2020-7925
Removed by vendor...
CVE-2020-4491
The CVE pertains to IBM Spectrum Scale where a local unprivileged user can reliably cause a denial of service by flooding the mmfsd daemon with RPC requests, potentially crashing the service. Affected versions are IBM Spectrum Scale V4.2.0.0–V4.2.3.22 and V5.0.0.0–V5.0.5. The underlying cause is ...
CVE-2020-4492
CVE-2020-4492 – IBM Spectrum Scale : A local attacker could cause a denial of service by sending a subset of ioctls with invalid arguments, crashing the kernel. Affected: IBM Spectrum Scale V5.0.0.0–V5.0.4.3 and V4.2.0.0–V4.2.3.21. Impact: high availability disruption (local exploit). Remediation...
CVE-2020-6276
SAP Business Objects Business Intelligence Platform bipodata (v4.2) is affected by a Cross-Site Scripting vulnerability due to insufficient encoding of user-controlled inputs. The issue arises in the WEB application, enabling an attacker to trigger client-side code execution. Root cause: lack of ...
CVE-2020-6281
CVE-2020-6281 affects SAP Business Objects Business Intelligence Platform (BI Launchpad) v4.2. The issue is insufficient encoding of user-controlled inputs, leading to reflected cross-site scripting. The connected documents consistently describe a client-side data validation/encoding problem in B...
CVE-2020-6231
CVE-2020-6231 affects SAP Business Objects Business Intelligence Platform — Web Intelligence HTML interface, version 4.2. The vulnerability is an XSS due to insufficient encoding of user-controlled inputs in the web interface. Root cause: input not properly encoded; impact: cross-site scripting. ...
CVE-2019-0395
SAP BusinessObjects Business Intelligence Platform Fiori BI Launchpad, before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability...
CVE-2019-0378
Summary: CVE-2019-0378 affects SAP BusinessObjects BI Platform (Web Intelligence HTML interface) prior to version 4.2. The issue is due to insufficient encoding of user-controlled inputs, enabling an attacker to store malicious scripts in the filename of a background image, resulting in a Stored ...
CVE-2019-0377
CVE-2019-0377 affects SAP BusinessObjects BI Platform (Web Intelligence HTML interface) and is disclosed as a stored cross-site scripting vulnerability in versions before 4.2. The root cause, as described in several connected sources, is insufficient encoding of user-controlled inputs in the inpu...
CVE-2019-0377
SAP BusinessObjects Business Intelligence Platform Web Intelligence HTML interface, before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in Stored Cross-Site Scripting...
CVE-2019-0375
CVE-2019-0375 affects SAP BusinessObjects BI Platform (Web Intelligence HTML interface). The issue is caused by insufficient encoding of user-controlled inputs, allowing reflected Cross-Site Scripting via the export dialog box for report names in versions prior to 4.2 and 4.3. The connected docum...
CVE-2018-2479
SAP BusinessObjects BI Platform (BIWorkspace) versions 4.1 and 4.2 have a Cross-Site Scripting (XSS) vulnerability caused by insufficient encoding of user-controlled inputs in the web UI. Root cause: inadequate encoding/escaping before rendering user input. Impact: XSS is possible when interactin...
CVE-2018-16282
CVE-2018-16282 affects Moxa EDR-810 devices (V4.2 build 18041013). The issue is a command injection in the web server exposed at /xml/net_WebCADELETEGetValue, exploitable by sending a crafted caname value to achieve arbitrary OS commands with root privileges remotely. Multiple sources (NVD entry,...
Security Bulletin: Vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2015-5252)
Summary A Samba vulnerability which could allow a remote attacker to launch a symlink attack affects IBM Spectrum Scale SMB protocol access method. Vulnerability Details CVEID: CVE-2015-5252 DESCRIPTION: Samba could allow a remote attacker to launch a symlink attack, caused by the improper...
Siemens SCALANCE M-800/S615 Web Vulnerability
OVERVIEW Siemens has identified a web security vulnerability in Siemen’s SCALANCE M-800 and S615 modules. This vulnerability was reported directly to Siemens by Alexander Van Maele and Tijl Deneut from HOWEST. Siemens has produced a new firmware version to mitigate this vulnerability. AFFECTED...
某通用型建站系统SQL注射之八
简要描述： 之八 详细说明： 某通用型建站系统SQL注射之八。 源码：XYCMS管理咨询公司建站系统 v4.2 地址：http://down.chinaz.com/soft/29472.htm 注入点：Showdxal.asp?id= 可搜索到实例： 实例如下： http://www.laco-hr.com/showdxal.asp?id=66 http://www.pundun.cn/showdxal.asp?id=66 http://www.szcxl.com/showdxal.asp?id=63 http://www.jshbls.com/showdxal.asp?id=19...
mktba V4.2 Remote File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: mktba V4.2 Remote File Upload Vulnerability Date: 09/08/2011 Author: Dr-AnGeL home Page: Sec-1337.com So0N | Sec4ever.com | V4-Team.com | Tryag.CC | Email: email protected | email protected Category:: webapps Google dork:...
GCI Trader MetaTrader v4.2.x - Null Pointer Vulnerability
Document Title: =============== GCI Trader MetaTrader v4.2.x - Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 111 Product & Service Introduction: =============================== Marktführende Software im...
Mice(finding the policy）CMS V4. 2 XDAY-vulnerability warning-the black bar safety net
Mice V4. 2 is currently the latest version. No nonsense, first look at the backend, the admin back-end home page with a login IP, the use of this vulnerability can be IP modify any of the Characters, including the HTML and JS. Yes, so that you can cross out the administrator password. ! Use metho...
