SAP S/4HANA does not perform sufficient instance-level authorization checks for certain...
CVE-2026-89121
SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on assoc
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19...
CVE-2026-100755
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 1
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal...
CVE-2026-89122
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated a
Display Product Catalog Based on Customs Declaration application does not perform sufficient...
CVE-2026-89124
Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts...
CVE-2026-89117
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources...
CVE-2026-89118
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-criti
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker...
CVE-2026-89106
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could
Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not...
CVE-2026-76976
Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-suppli
Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could...
CVE-2026-76975
Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library...
CVE-2026-89105
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from uninte
The affected code used child_process.execSync with a shell string for generator installation and...
CVE-2026-89116
The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This al
The admin API endpoint used to retrieve CLA signature records does not consistently enforce the...
CVE-2026-89112
The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization c
Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and...
CVE-2026-76972
Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could s
A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2....
CVE-2026-108945
A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue
A security flaw has been discovered in philz1337x clarity-upscaler up to...
CVE-2026-108942
A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of...
CVE-2026-81858
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain informa
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain...
CVE-2026-75621
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to ex
A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function...
CVE-2026-108939
A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to...
CVE-2026-18343
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain...
CVE-2026-75076
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to t