| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-125612 | 8.8 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww DIAEnergie allows SQL Injection. This issue affects DIAEnergie: before 1.11.01.032. | 2026-11-10 03:16:42 | 2026-11-10 03:16:42 |
| CVE-2026-4967 | 7.5 | In IMS, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. | 2026-11-10 03:16:42 | 2026-07-03 07:16:24 |
| CVE-2026-120749 | 6.2 | A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableSe | 2026-11-10 03:16:41 | 2026-11-06 07:17:06 |
| CVE-2026-88710 | - | Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthenticated nearby user to trigger a chain of actions—unauthenticated queries, identifier guessing, credential overwriting, and command in | 2026-11-10 02:16:45 | 2026-11-10 02:16:45 |
| CVE-2026-88709 | - | Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with physical access to insert a USB device containing a specially crafted directory name, potentially executing arbitrary commands with | 2026-11-10 02:16:45 | 2026-11-10 02:16:45 |
| CVE-2026-88708 | - | An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, potentially overwriting memory and causing the affected service to crash. Refer to the ' Security Update for ASU | 2026-11-10 02:16:45 | 2026-11-10 02:16:45 |
| CVE-2026-88707 | - | An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Ref | 2026-11-10 02:16:45 | 2026-11-10 02:16:45 |
| CVE-2026-89131 | 4.3 | SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, triggers an unintended | 2026-11-10 01:17:22 | 2026-11-10 01:17:22 |
| CVE-2026-89129 | 5.8 | Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attacker�s control. Successful | 2026-11-10 01:17:22 | 2026-11-10 01:17:22 |
| CVE-2026-89128 | 5.3 | Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP operations exposed over HTTP without proper access control. Successful exploitation could allow disclosure of information accessible through | 2026-11-10 01:17:22 | 2026-11-10 01:17:22 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: