Archive
14 September 2021
Vulnerabilities first published on this day (UTC), newest first.
23 results · Clear filters · Feed
-
Medium 6.1
Cross-site Scripting in Beego
Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.
-
Medium 5.4
IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
-
Medium 5.3
IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. …
-
Medium 4.3
When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the…
-
Medium 5.3
Under certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get access to some encryp…
-
Medium 6.5
Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This a…
-
Medium 6.5
SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or dir…
-
Medium 6.5
SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read sensitive data over th…
-
Medium 6.1
Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This a…
-
Medium 5.4
The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to injec…
-
Medium 5.4
SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617,…
-
Medium 4.3
SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directo…
-
Medium 4.8
SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user …
-
Medium 6.1
When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social eng…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attac…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software ha…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software ha…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attac…
-
Medium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software al…
-
Medium 6.5
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by t…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames o…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full na…