GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3...
CVE-2026-104661
GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4
#advisory
共收录 23043 条相关情报。
← 返回所有主题A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability...
CVE-2026-108948
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of t
SAP S/4HANA does not perform sufficient instance-level authorization checks for certain...
CVE-2026-89121
SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on assoc
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19...
CVE-2026-100755
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 1
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal...
CVE-2026-89122
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated a
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19...
CVE-2026-100104
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 1
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed...
CVE-2026-89120
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The se
Display Product Catalog Based on Customs Declaration application does not perform sufficient...
CVE-2026-89124
Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts...
CVE-2026-89117
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources...
CVE-2026-89118
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-criti
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP...
CVE-2026-89111
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker
SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization...
CVE-2026-89108
SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain adm
SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed...
CVE-2026-89107
SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition fun
SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is...
CVE-2026-89113
SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker...
CVE-2026-89106
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could
Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not...
CVE-2026-76976
Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-suppli
Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could...
CVE-2026-76975
Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal...
CVE-2026-89110
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attac
The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf:...
CVE-2026-87689
The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::Credential
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library...
CVE-2026-89105
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from uninte