r 3 enterprise vulnerabilities and exploits

(subscribe to this query)

Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode user-controlled inputs, this makes it possible for an malicious user to send unwanted scripts to the browser of the victim using unwanted inp...

Sap R\\/3 Enterprise 603 Sap R\\/3 Enterprise 605 Sap R\\/3 Enterprise 606 Sap R\\/3 Enterprise 616 Sap R\\/3 Enterprise 617 Sap R\\/3 Enterprise 600 Sap R\\/3 Enterprise 602 Sap R\\/3 Enterprise 604

Executing transaction WRCK in SAP R/3 Enterprise Retail (EHP6) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Sap R\\/3 Enterprise Retail -

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Text Ads Enterprise allow remote malicious users to inject arbitrary web script or HTML via the (1) r parameter to (a) forgot_uid.php, the (2) query or (3) sk parameter to (b) search_results.php, or (4) the pageId ...

Alstrasoft Text Ads Enterprise 2.1

Python 2.7.x up to and including 2.7.16 and 3.x up to and including 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given ...

1 Article

urllib in Python 2.x up to and including 2.7.16 supports the local_file: scheme, which makes it easier for remote malicious users to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific...

Linux Linux Kernel Fedoraproject Fedora 36 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Debian Debian Linux 10.0

Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote malicious users to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.

Ca Brightstor Arcserve Backup 9.0.1 Ca Brightstor Arcserve Backup 9.0 1 Ca Brightstor Arcserve Backup Agent 9.0.1 Ca Brightstor Enterprise Backup Agent 10.5 Ca Brightstor Arcserve Backup 11.1 Ca Brightstor Arcserve Backup Agent 11 Ca Brightstor Enterprise Backup Agent 10.0 Ca Brightstor Arcserve Backup 11.0 Ca Brightstor Arcserve Backup Agent 11.1 Ca Brightstor Arcserve Backup Agent 11.0 Broadcom Brightstor Enterprise Backup 10.0 Broadcom Brightstor Enterprise Backup 10.5

2 EDB exploits

A security regression of CVE-2019-9636 exists in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an malicious user to exploit CVE-2019-9636 by abusing the user and password p...

A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the...

Linux Linux Kernel Fedoraproject Fedora 36 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

Linux Linux Kernel 5.18 Linux Linux Kernel Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook