208 matches found
CVE-2021-33704
Summary: CVE-2021-33704 affects SAP Business One 10.0 Service Layer. An authenticated attacker can invoke functions that should be restricted, enabling reading, modification, or deletion of restricted data. The vulnerability arises from missing authorization checks and can be exploited over the n...
CVE-2021-33700
SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of...
CVE-2021-33700
CVE-2021-33700 affects SAP Business One 10.0. A local attacker with access to the victim’s browser can log in as the victim without the password, potentially exposing highly sensitive information and enabling substantial control over the vulnerable application. Public details in the provided docu...
Information disclosure
Under certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get access to some encrypted sensitive information, but does not have control over kind or degree...
CVE-2021-35999 Adobe Prelude Memory Corruption Remote Code Execution Vulnerability
Adobe Prelude version 10.0 and earlier is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires...
PT-2021-3707 · Adobe · Prelude
Name of the Vulnerable Software and Affected Versions: Adobe Prelude versions 10.0 and earlier Description: The issue is related to a memory corruption vulnerability when processing media files, which can be exploited by an unauthenticated attacker to achieve arbitrary code execution in the conte...
SAP Business One Information Disclosure Vulnerability (CNVD-2021-42413)
SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. An information disclosure vulnerability exists in SAP Business One version 10.0, which can be exploited by an...
CVE-2021-33662
Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing an attacker to access information which would otherwise be restricted...
Authentication flaw
Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing an attacker to access information which would otherwise be restricted...
CVE-2021-33662
Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing an attacker to access information which would otherwise be restricted...
CVE-2021-26582
A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...
CVE-2020-4826
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189840...
Trend Micro Worry-Free Business Security 访问控制错误漏洞
Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and e-mail protection. An access control error vulnerability exists in Trend Micro Worry-Free Business...
Security Bulletin: A Session Timeout vulnerability affects IBM Rational Performance Tester
Summary IBM Rational Performance Tester contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID. Vulnerability Details Third Party Entry: PSIRT-ADV0027326 DESCRIPTION: Created from Advisory: ADV0027326 CVSS Base score: 4.3 CVSS Vector:...
Security Bulletin: A vulnerability has been identified in Apache HttpClient shipped with Netcool/OMNIbus Integrations Java Gateway Framework (CVE-2020-13956)
Summary Apache HttpClient is a component shipped with IBM Tivoli Netcool/OMNIbus Integrations Java Gateway Framework. Information about security vulnerabilities affecting Apache HttpClient has been published. CVE-2020-13956 Vulnerability Details CVEID: CVE-2020-13956 DESCRIPTION: Apache HttpClien...
Adobe Lightroom Classic Arbitrary Code ExecutionVulnerability - Windows
Adobe Lightroom Classic is prone to an arbitrary code execution vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...
PT-2020-16664 · Eclipse +3 · Eclipse Jetty +3
Name of the Vulnerable Software and Affected Versions: Eclipse Jetty versions 9.4.0.RC0 through 9.4.34.v20201102 Eclipse Jetty versions 10.0.0.alpha0 through 10.0.0.beta2 Eclipse Jetty versions 11.0.0.alpha0 through 11.0.0.beta2 Description: The issue occurs when GZIP request body inflation is...
CVE-2020-2038
An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlie...
