Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

solutions business manager vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-4806
A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hoo...
Gnu Glibc 2.33Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 9.2 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Enterprise Linux For Ibm Z Systems S390x 9.2Redhat Enterprise Linux For Ibm Z Systems Eus S390x 9.2Redhat Enterprise Linux Tus 8.8Redhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian 9.0 Ppc64leRedhat Codeready Linux Builder For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Arm64 9.0 Aarch64Redhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 9.0 Aarch64
NA
CVE-2023-4527
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function ret...
Gnu GlibcRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 9.2 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Enterprise Linux For Ibm Z Systems S390x 9.2Redhat Enterprise Linux For Ibm Z Systems Eus S390x 9.2Redhat Enterprise Linux Tus 8.8Redhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian 9.0 Ppc64leRedhat Codeready Linux Builder For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Arm64 9.0 Aarch64Redhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 9.0 Aarch64Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64le
2.3
CVSSv2
CVE-2019-18942
Micro Focus Solutions Business Manager versions before 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.
Microfocus Solutions Business Manager
2.3
CVSSv2
CVE-2019-18944
Micro Focus Solutions Business Manager Application Repository versions before 11.7.1 are vulnerable to reflected XSS.
Microfocus Solutions Business Manager
3.8
CVSSv2
CVE-2019-18946
Micro Focus Solutions Business Manager Application Repository versions before 11.7.1 are vulnerable to session fixation.
Microfocus Solutions Business Manager
5.2
CVSSv2
CVE-2019-18943
Micro Focus Solutions Business Manager versions before 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations.
Microfocus Solutions Business Manager
5.2
CVSSv2
CVE-2019-18945
Micro Focus Solutions Business Manager Application Repository versions before 11.7.1 are vulnerable to privilege escalation vulnerability.
Microfocus Solutions Business Manager
2.7
CVSSv2
CVE-2019-18947
Micro Focus Solutions Business Manager Application Repository versions before 11.7.1 are vulnerable to information disclosure.
Microfocus Solutions Business Manager
3.5
CVSSv2
CVE-2015-7851
Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP prior to 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite ...
Ntp NtpNtp Ntp 4.2.8
5.8
CVSSv2
CVE-2019-3477
Micro Focus Solution Business Manager versions before 11.4.2 is susceptible to open redirect.
Microfocus Solutions Business Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21987buffer overflowCVE-2024-28890CVE-2024-27574CVE-2024-27347CVE-2024-31450privilegeSSTICVE-2024-31666
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook