CVE-2019-0381

CVE-2019-0381 describes a binary planting vulnerability in SAP SQL Anywhere (before 17.0), SAP IQ (before 16.1), and SAP Dynamic Tiering (before 1.0/2.0) that can cause inadvertent access to files outside the user-specified directories. The issue is triggered via local access and stems from how c...

CVE-2015-2819

CVE-2015-2819 affects SAP Sybase SQL Anywhere 11 and 16. An anonymous, remotely exploitable DoS can be triggered by a crafted request, crashing the server. ERPScan’s advisory (ERPSCAN-15-010) and SAP Security Note 2108161 describe the vulnerability and remediation. A PoC is included in the adviso...