Archive
March 2020
Vulnerabilities first published in this month (UTC), newest first.
1,762 results · Feed
-
Unscored —
Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payl…
-
Unscored —
Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to th…
-
Medium 4.7
SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the at…
-
High 7.2
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, all…
-
High 7.5
SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basi…
-
Critical 10.0
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform a…
KEV Nov 3, 2021 -
Medium 4.7
SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning m…
-
Medium 6.1
SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02, 7.10, 7.11, 7.30, 7.31…
-
Medium 4.3
The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 60…
-
Critical 9.1
SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker t…
-
Medium 5.5
SAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; doe…
-
Medium 6.1
The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlle…
-
Medium 5.4
The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client-side angularjs template…
-
Medium 5.4
The view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN versions- 618, 730 and…
-
Critical 9.8
SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. Thi…
-
Low 3.8
SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Ex…
-
High 7.5
SAP BusinessObjects Mobile (MobileBIService), version 4.2, allows an attacker to generate multiple requests, using whic…
-
Medium 5.4
SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser hi…
-
Unscored —
In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This co…
-
Unscored —
In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —
In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds c…
-
Unscored —
In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due t…
-
Unscored —
In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_…
-
Unscored —
In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. …
-
Unscored —
In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. T…
-
Unscored —
In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of …
-
Unscored —
In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. Thi…
-
Unscored —
In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This co…
-
Unscored —
In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could le…
-
Unscored —
In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio…
-
Unscored —
In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflo…
-
Unscored —
In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could le…
-
Unscored —
In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local …
-
Unscored —
In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote inf…
-
Unscored —
In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escala…
-
Unscored —
In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local esc…
-
Unscored —
In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could l…
-
Unscored —
In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to l…
-
Unscored —
In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic …
-
Unscored —
In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This …