| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-89105 | 4.2 | The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthori | 2026-10-13 01:16:47 | 2026-10-13 01:16:47 |
| CVE-2026-87689 | 9.8 | The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_c | 2026-10-13 01:16:47 | 2026-10-13 01:16:47 |
| CVE-2026-76976 | 5.4 | Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticated attacker to send malicious content to another user. If the victim i | 2026-10-13 01:16:46 | 2026-10-13 01:16:46 |
| CVE-2026-76975 | 6.1 | Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-controlled inpu | 2026-10-13 01:16:46 | 2026-10-13 01:16:46 |
| CVE-2026-76972 | 6.5 | Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application. If an authenticated victim accesses a page that displays this st | 2026-10-13 01:16:46 | 2026-10-13 01:16:46 |
| CVE-2026-58249 | 7.5 | SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, ca | 2026-10-13 01:16:46 | 2026-10-13 01:16:46 |
| CVE-2026-58242 | 3.5 | SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could all | 2026-10-13 01:16:46 | 2026-10-13 01:16:46 |
| CVE-2026-5260 | 8.2 | A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerabil | 2026-10-13 01:16:46 | 2026-05-26 22:16:44 |
| CVE-2026-42014 | 6.6 | A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token th | 2026-10-13 01:16:45 | 2026-06-16 02:16:19 |
| CVE-2026-42015 | 5.3 | A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. | 2026-10-13 01:16:45 | 2026-05-26 22:16:42 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: