| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
| In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
| In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
| In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
| In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
| In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed |
| In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
| In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed |
| In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
| In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
| In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
| In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed |
| In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed |
| Unauthenticated LFI/SSRF in JCDashboards component for Joomla. |
| SQLi vulnerability in LMS Lite component for Joomla. |
| A reflected XSS vulnerability was discovered in the Extplorer component for Joomla. |
| A reflected XSS vulnerability was discovered in the LivingWord component for Joomla. |
| S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This could allow an attacker to perform unintended actions resulting in escalation of privileges which has low impact on confidentiality and integrity with no impact on availibility of the system.
|
| SAP NetWeaver AS ABAP (applications based on Unified Rendering) - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 702, SAP_BASIS 731, allows an attacker to inject JavaScript code that can be executed in the web-application. An attacker could thereby control the behavior of this web-application.
|
| SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system.
|
