SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is...
CVE-2026-89113
SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database
2026-10-13 归档
今日共收录 1460 条安全情报，包含 709 个 CVE，466 篇安全通告，以及 13 篇研究论文。
← 返回归档列表SAP UI5 does not perform sufficient input validation under certain configurations. An attacker...
CVE-2026-89106
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could
Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not...
CVE-2026-76976
Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-suppli
Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could...
CVE-2026-76975
Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal...
CVE-2026-89110
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attac
The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf:...
CVE-2026-87689
The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::Credential
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library...
CVE-2026-89105
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from uninte
Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and...
CVE-2026-76972
Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could s
SAP Cloud Connector contains an improper authorization check, which could be exploited by a low...
CVE-2026-58242
SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker thro
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-82108
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a...
CVE-2026-84418
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate,
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive...
CVE-2026-96119
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbi
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
cloud architecture assessment
cloud architecture assessment
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud