| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-0243 | 6.5 | Under some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 (SP08)) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. | 2020-08-24 17:37:00 | 2019-01-08 20:29:00 |
| CVE-2019-0241 | 5.0 | SAP Work and Inventory Manager (Agentry_SDK , before 7.0, 7.1) allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. | 2020-08-24 17:37:00 | 2019-01-08 20:29:00 |
| CVE-2019-0240 | 5.0 | SAP Business Objects Mobile for Android (before 6.3.5) application allows an attacker to provide malicious input in the form of a SAP BI link, preventing legitimate users from accessing the application by crashing it. | 2020-08-24 17:37:00 | 2019-01-08 20:29:00 |
| CVE-2018-2499 | 5.0 | A security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8.0, 10.1) may allow an attacker to discover the password hash of an admin user. | 2020-08-24 17:37:00 | 2019-01-08 20:29:00 |
| CVE-2019-5489 | 2.1 | The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this af | 2020-08-24 17:37:00 | 2019-01-07 17:29:00 |
| CVE-2018-20673 | 4.3 | The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer ove | 2020-08-24 17:37:00 | 2019-01-04 18:29:00 |
| CVE-2019-5005 | 4.3 | An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the allocated memory without judging whether this will cause | 2020-08-24 17:37:00 | 2019-01-03 23:29:00 |
| CVE-2018-18004 | 5.0 | Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter. | 2020-08-24 17:37:00 | 2019-01-03 20:29:00 |
| CVE-2018-20617 | 6.8 | ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_csv_decode2 function in ok_csv.c. | 2020-08-24 17:37:00 | 2018-12-31 14:29:00 |
| CVE-2018-20616 | 6.8 | ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_wav.c. | 2020-08-24 17:37:00 | 2018-12-31 13:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: