Lucene search
K

384 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.0 views

CVE-2026-32340

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through = 1.3.2...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/13 9:31 p.m.0 views

EUVD-2026-11822

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through = 1.3.2...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References2
NVD
NVD
added 2026/03/13 7:54 p.m.2 views

CVE-2026-32340

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through = 1.3.2...

5.3CVSS0.00042EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:41 a.m.4 views

CVE-2026-32340

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through = 1.3.2...

5.8AI score0.00042EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/13 11:41 a.m.21 views

CVE-2026-32340 WordPress Business One Page theme <= 1.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through = 1.3.2...

5.3CVSS0.00042EPSS
Exploits0References1
CVE
CVE
added 2026/03/13 11:41 a.m.3 views

CVE-2026-32340

CVE-2026-32340 affects the WordPress theme Business One Page (raratheme) up to version 1.3.2. The issue is a Missing Authorization/Broken Access Control vulnerability caused by incorrectly configured access control security levels in the Business One Page plugin, enabling unauthorized access due ...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 11:41 a.m.1 views

CVE-2026-32340 WordPress Business One Page theme <= 1.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through = 1.3.2...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.2 views

WordPress plugin Business One Page 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.1 views

PT-2026-25187

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through = 1.3.2...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/03/11 7:8 a.m.2 views

CVE-2026-0489

Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting XSS vulnerability. This issue ha...

6.1CVSS5.8AI score0.0005EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/10 6:31 p.m.2 views

EUVD-2026-10440

Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting XSS vulnerability. This issue ha...

6.1CVSS5.8AI score0.0005EPSS
Exploits0References3
NVD
NVD
added 2026/03/10 5:31 p.m.3 views

CVE-2026-0489

Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting XSS vulnerability. This issue ha...

6.1CVSS0.0005EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/10 12:17 a.m.1 views

CVE-2026-0489 DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)

Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting XSS vulnerability. This issue ha...

6.1CVSS5.8AI score0.0005EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/10 12:17 a.m.1 views

CVE-2026-0489

Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting XSS vulnerability. This issue ha...

6.1CVSS5.8AI score0.0005EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/10 12:17 a.m.24 views

CVE-2026-0489 DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)

Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting XSS vulnerability. This issue ha...

6.1CVSS0.0005EPSS
Exploits0References2
CVE
CVE
added 2026/03/10 12:17 a.m.5 views

CVE-2026-0489

SAP Business One Job Service is affected by a DOM-based XSS vulnerability (CVE-2026-0489) due to insufficient validation of a user-controlled input in a URL query parameter. The issue could allow an unauthenticated attacker, via user interaction, to inject crafted input that executes in the victi...

6.1CVSS5.8AI score0.0005EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/10 12:0 a.m.3 views

SAP Business One Job Service 跨站脚本漏洞

SAP Business One Job Service is a service component of SAP's Enterprise Resource Planning ERP system for scheduling and executing tasks in the background. A cross-site scripting vulnerability exists in SAP Business One Job Service. The vulnerability stems from the lack of effective filtering and...

6.1CVSS5.9AI score0.0005EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/11 7:30 a.m.1 views

CVE-2026-24319

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high...

5.8CVSS5.5AI score0.00004EPSS
Exploits0References1
OSV
OSV
added 2026/02/10 4:16 a.m.0 views

CVE-2026-24319

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high...

5.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2026/02/10 4:16 a.m.2 views

CVE-2026-24319

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high...

5.8CVSS0.00004EPSS
Exploits0References2
Rows per page
Query Builder