10 November 2020

14 results · Clear filters · Feed

• Medium 5.0
  CVE-2020-27146

  TIBCO iProcess Workspace Browser CSRF

  The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery (CSRF) attack on the affected system. A s…

  TIBCO Software TIBCO iProcess Workspace (Browser)
  Nov 10, 2020
• Medium 4.4
  CVE-2020-26807

  SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its i…

  SAP SAP ERP Client for E-Bilanz 1.0
  Nov 10, 2020
• Medium 6.5
  CVE-2020-26818

  SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated use…

  SAP SAP NetWeaver AS ABAP (Web Dynpro)
  Nov 10, 2020
• Medium 4.3
  CVE-2020-26817

  SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sour…

  SAP SAP 3D Visual Enterprise Viewer
  Nov 10, 2020
• Medium 4.9
  CVE-2020-26814

  SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys …

  SAP SAP Process Integration (PGP - Module Business-to-Business Add On)
  Nov 10, 2020
• Medium 5.4
  CVE-2020-26819

  SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated use…

  SAP SAP NetWeaver AS ABAP (Web Dynpro)
  Nov 10, 2020
• Medium 5.3
  CVE-2020-26811

  SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to…

  SAP SAP Commerce Cloud (Accelerator Payment Mock)
  Nov 10, 2020
• Medium 4.3
  CVE-2020-6316

  SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization i…

  SAP SAP S/4 HANA SAP ERP
  Nov 10, 2020
• Medium 5.3
  CVE-2020-26809

  SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission …

  SAP SAP Commerce Cloud
  Nov 10, 2020
• Medium 5.5
  CVE-2020-12485

  The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which …

  vivo The frame touch module
  Nov 10, 2020
• Medium 6.4
  CVE-2020-4704

  IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbi…

  IBM Content Navigator
  Nov 10, 2020
• Medium 5.4
  CVE-2020-4760

  IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J…

  IBM Content Navigator
  Nov 10, 2020
• Medium 6.3
  CVE-2020-4568

  IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, and 4.0 stores user credentials in plain in clear text which can be read b…

  IBM Security Key Lifecycle Manager
  Nov 10, 2020
• Medium 6.9
  CVE-2020-5388

  Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vu…

  Dell CPG BIOS
  Nov 10, 2020