Archive
14 April 2020
Vulnerabilities first published on this day (UTC), newest first.
24 results · Clear filters · Feed
-
Medium 4.8
CSRF and DNS Rebinding in Oasis
Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read…
-
Medium 5.8
Possible XSS attack in Wagtail
In Wagtail before versions 2.8.1 and 2.7.2, a cross-site scripting (XSS) vulnerability exists on the page revision comparison view within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtail admin could potentially craf…
-
Medium 5.1
Internal NCryptDecrypt method could be used externally from WindowsHello library.
The WindowsHello open source library (NuGet HaemmerElectronics.SeppPenner.WindowsHello), before version 1.0.4, has a vulnerability where encrypted data could potentially be decrypted without needing authentication. If the library is used to encrypt text and w…
-
Medium 5.0
A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1…
-
Medium 4.4
A vulnerability was reported in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to …
-
Medium 6.1
SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect use…
-
Medium 6.1
SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752…
-
Medium 6.4
SAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext password in the response, …
-
Medium 5.3
SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missin…
-
Medium 4.3
SAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500 and S4FPSL 100, allow…
-
Medium 5.4
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4.2, does not sufficient…
-
Medium 5.4
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4.2, does not sufficient…
-
Medium 5.3
SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an atta…
-
Medium 4.5
SAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with admini…
-
Medium 6.1
SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 74…
-
Medium 5.3
SAP Business Objects Business Intelligence Platform (CMS / Auditing issues), version 4.2, allows attacker to send speci…
-
Medium 5.4
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4.1, 4.2, does not suff…
-
Medium 6.1
SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-cont…
-
Medium 5.4
Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not suf…
-
Medium 6.1
The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modi…
-
Medium 5.0
Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an atta…
-
Medium 4.7
SAP S/4HANA (Financial Products Subledger), version 100, uses an incorrect authorization object in some reports. Althou…
-
Medium 6.5
IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improp…
-
Medium 6.1
SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752…