Archive
September 2021
Vulnerabilities first published in this month (UTC), newest first.
1,922 results · Feed
-
Unscored —
On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on …
-
Unscored —
On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the brute force protection fe…
-
Unscored —
On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers …
-
Unscored —
On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) dr…
-
Unscored —
Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. Th…
-
Unscored —
In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to rece…
-
Unscored —
In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the …
-
Medium 4.3
When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the…
-
Unscored —
SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end…
-
Medium 5.3
Under certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get access to some encryp…
-
Medium 6.5
Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This a…
-
High 7.5
SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthentic…
-
Medium 6.5
SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or dir…
-
Critical 9.6
Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send ma…
-
Medium 6.5
SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read sensitive data over th…
-
Critical 9.9
SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticate…
KEV Jun 9, 2022 -
Critical 10.0
SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not p…
-
Medium 6.1
Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This a…
-
Medium 5.4
The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to injec…
-
Critical 9.9
Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT funct…
-
Medium 5.4
SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617,…
-
High 8.3
Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and pers…
-
High 8.9
SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7…
-
Medium 4.3
SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directo…
-
Medium 4.8
SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user …
-
Critical 9.9
SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerabil…
-
Medium 6.1
When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social eng…
-
Unscored —
A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Wor…
-
Unscored —
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…
-
Unscored —
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…
-
Unscored —
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V1…
-
Unscored —
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 rel…
-
Unscored —
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…
-
Unscored —
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…
-
Unscored —
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vu…
-
Unscored —CVE-2021-37200 EPSS 37%
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attac…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software ha…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software ha…
-
Medium 4.3
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attac…