Lucene search
+L

5 matches found

CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•32 views

SAP Commerce input validation vulnerability

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. An input validation error vulnerability exists in SAP Commerce versions 1905, 2005, 2105, 2011, and 2205, which ca...

8.8CVSS6.9AI score0.00878EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2021/07/09 3:15 p.m.•10 views

CVE-2021-27035

A maliciously crafted TIFF, TIF, PICT, TGA, or DWF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA or DWF files. This vulnerability in conjunction with other vulnerabilities could lead to code executio...

7.8CVSS7.2AI score0.01708EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/13 12:00 a.m.•21 views

SAP Commerce code injection vulnerability

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. A security vulnerability exists in SAP Commerce 1808, 1811, 1905, 2005, 2011, which allows certain authorized user...

9.9CVSS7.8AI score0.02001EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/02/25 12:00 a.m.•12 views

PT-2021-3516

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions 2011 through 2018 Description A Double Free issue in the PDF file parsing functionality of Autodesk Design Review allows remote attackers to execute arbitrary code. This requires user interaction, where the targ...

10CVSS6.4AI score0.03017EPSS
SaveExploits0References13
osv_cve
osv_cve
•added 2021/01/12 3:15 p.m.•24 views

CVE-2021-21445

SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attack...

5.4CVSS6.3AI score0.00643EPSS
SaveExploits0References2
Rows per page
Query Builder