An unauthenticated server-side request forgery vulnerability exists in SAP Hybris acceleratorservices. This means that anyone accessing this extension is able to use it to make arbitrary HTTP requests, bypassing network restrictions. Versions affected include 1808, 1811, 1905, and 2005.
b53e0a33c20b6b6c42760d7b7dbb5e3ba1657246bda4b65bb14054a620c16d7dPolkit version Polkit 0.105-26 0.117-2 suffers from a local privilege escalation vulnerability.
89700c7a75c7c7ebb3f47ffc215d09f899edced891a3fb50cd529fb84ddb9603Online Library Management System version 2.0 suffers from a cross site request forgery vulnerability.
f335a643743c790f4fb904a776705386fc4d1db5eb5374c4b6fe56d99496825aRed Hat Security Advisory 2021-2415-01 - The Dynamic Host Configuration Protocol is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network. Issues addressed include a buffer overflow vulnerability.
078cec21a8b047d1e60c397f39820a73a6d7deafcc9adbbf2a5702dc9ba87d89Brother BRAgent version 1.38 suffers from an unquoted service path vulnerability.
45eb60c14cadc67806799b3d0213269febdc728de0d20a442eb8639accef3766Sami HTTP server version 2.0 suffers from a denial of service vulnerability.
701379fe6f3a3ab77800326f632f07e8141a7375f546d11b21c4b1c0cfdf53c3Red Hat Security Advisory 2021-2418-01 - The Dynamic Host Configuration Protocol is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network. Issues addressed include a buffer overflow vulnerability.
10bf21362e07c081c7d01d6dbd7e66a110a9396ed7739d08d6a9646b30c9708eSAP Solution Manager version 7.2 (ST 720) suffers from an open redirection vulnerability.
be314dee601c6b7d96a925a535be63d81b445ebec3bcdd2a0214aea82ebc5152SysGauge version 7.9.18 suffers from an unquoted service path vulnerability.
fcd09279bc57ebc79a34136a3e3594bfb26cc173766c8b51230b0e912f425676
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed