CVE-2025-30017 Missing Authorization check in SAP Solution Manager

Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of the application...

CVE-2025-31170

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58127

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58125

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58124

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58126

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58125

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2025-31175

Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2025-31170

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58127

CVE-2024-58127 is described as an access control vulnerability in the security verification/authentication module, with potential impacts to integrity and confidentiality. Connected sources (CNVD/CNNVD) map this to Huawei HarmonyOS and EMUI and describe a security-bypass scenario stemming from an...

CVE-2024-58126

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58126

CVE-2024-58126 corresponds to an access-control vulnerability in Huawei HarmonyOS and EMUI’s security verification module. The issue is described across multiple sources as improper access control that can affect confidentiality and integrity. The NVD entry lists high impact (C/H/I/H) with networ...

CVE-2024-58125

CVE-2024-58125: An access control vulnerability exists in the security verification module of Huawei HarmonyOS and EMUI. The root cause is improper access control within the security authentication component, enabling potential unauthorized access that can affect integrity and confidentiality. Do...

CVE-2024-58125

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58124

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58124

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-58124

CVE-2024-58124 pertains to Huawei HarmonyOS and EMUI. The vulnerability is an access control flaw in the Security Verification Module (improper access control in the Security Authentication Module) that can affect integrity and confidentiality. Impact is described as high/critical depending on so...

XXE (XML External Entity Injection) org.codehaus.jackson:jackson-mapper-asl Dependency in Confluence Data Center and Server

This High severity XXE XML External Entity Injection org.codehaus.jackson:jackson-mapper-asl Dependency vulnerability was introduced in versions 8.5 of Confluence Data Center and Server. This org.codehaus.jackson:jackson-mapper-asl Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS...

Security Bulletin: JAVA related vulnerabilities in IBM SP Enterprise Resource Planning (ERP) effected the ERP product.

Summary IBM Storage Protect Enterprise Resource Planning can be affected by security flaws in JAVA. : An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentiality, high integrity impacts, as described in the "Vulnerability Details...

Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities

Summary IBM Cloud Transformation Advisor has addressed multiple security vulnerabilities including those in Node.js, IBM WebSphere Application Server Liberty and various other libraries. Vulnerability Details CVEID:CVE-2022-24839 DESCRIPTION: Sparkle Motion Nokogiri is vulnerable to a denial of...