Lucene search
+L

1609 matches found

Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•12 views

MiracleLinux 3 : libxslt-1.1.17-2.1.2AXS3 (AXSA:2008-83:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2008-83:01 advisory. libxslt is a library for transforming XML files into other XML files using the standard XSLT stylesheet transformation mechanism. CVE-2008-2935: Multiple...

7.5CVSS8.8AI score0.12789EPSS
SaveExploits3References2
BDU FSTEC
BDU FSTEC
•added 2026/01/14 12:00 a.m.•18 views

The vulnerability of the Remote Function Call interface of the SAP Landscape Transformation (SLT) software tool allows a attacker to circumvent security restrictions, execute arbitrary code, and gain full control over the system.

The vulnerability of the Remote Function Call interface of the SAP Landscape Transformation SLT software tool is related to improper code generation. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, execute arbitrary code, and gain full control over the syst...

9.1CVSS6.4AI score0.00511EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/01/13 2:01 p.m.•8 views

Astra Linux – Vulnerability in libxslt

A use-after-free vulnerability was discovered in libxslt while parsing XSL nodes, which may lead to the dereferencing of expired pointers and cause the application to crash...

5.5CVSS6.4AI score0.00173EPSS
SaveExploits0References3
NVD
NVD
•added 2026/01/13 2:15 a.m.•20 views

CVE-2026-0491

SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively...

9.1CVSS0.00511EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/13 1:12 a.m.•5 views

CVE-2026-0491 Code Injection vulnerability in SAP Landscape Transformation

SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively...

9.1CVSS7AI score0.00511EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/13 1:12 a.m.•61 views

CVE-2026-0491

CVE-2026-0491 affects SAP Landscape Transformation. A function module exposed via RFC allows an admin to inject arbitrary ABAP code or OS commands, bypassing authorization checks and potentially compromising confidentiality, integrity, and availability. The issue is described across multiple sour...

9.1CVSS8.4AI score0.00511EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/13 1:12 a.m.•46 views

CVE-2026-0491 Code Injection vulnerability in SAP Landscape Transformation

SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively...

9.1CVSS0.00511EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•32 views

PT-2026-2327

Name of the Vulnerable Software and Affected Versions SAP Landscape Transformation affected versions not specified Description The software contains a flaw in a function module exposed via Remote Function Call RFC that allows an attacker with administrative privileges to inject arbitrary ABAP cod...

9.1CVSS6.8AI score0.00511EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•2 views

CVE-2026-0491: Improper Control of Generation of Code

SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively...

9.1CVSS8.4AI score0.00511EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•17 views

SAP Landscape Transformation 代码注入漏洞

SAP Landscape Transformation is a tool for system data migration and integration from SAP, Germany. SAP Landscape Transformation suffers from a code injection vulnerability that originates from an attacker being able to inject arbitrary ABAP code or OS commands via RFC-exposed function modules,...

9.1CVSS6.2AI score0.00511EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:28 a.m.•11 views

CVE-2023-49881

IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

8.8CVSS6.5AI score0.00219EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/01/04 8:47 p.m.•202 views

XLST-XML-PAYLOAD-GENERATOR

XLST-XML-PAYLOAD-GENERATOR This project is a...

8.6AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/01/02 12:00 a.m.•11 views

Threat Intelligence Driven IP Protection for Entrepreneurial SMEs

Entrepreneurial small to medium enterprises face significant cybersecurity challenges when developing valuable intellectual property IP. This paper addresses the critical gap in research on how E-SMEs can protect their IP assets from cybersecurity threats through effective threat intelligence and...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•13 views

PT-2026-7615

Name of the Vulnerable Software and Affected Versions libjxl affected versions not specified Description A crafted file can lead to libjxl's decoder writing pixel data to uninitialized and unallocated memory. Subsequently, data from another uninitialized region is copied to pixel data. This occur...

8.7CVSS5.2AI score0.00286EPSS
SaveExploits1References24
BDU FSTEC
BDU FSTEC
•added 2025/12/24 12:00 a.m.•13 views

The vulnerability of the JDBC call transformation driver of SAP jConnect, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.

The vulnerability of the JDBC call transformation driver of SAP jConnect is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.1CVSS7.7AI score0.0948EPSS
SaveExploits0References2Affected Software1
Packet Storm News
Packet Storm News
•added 2025/12/16 12:00 a.m.•19 views

Data Protection and Corporate Reputation Management in the Digital Era

This paper analyzes the relationship between cybersecurity management, data protection, and corporate reputation in the context of digital transformation. The study examines how organizations implement strategies and tools to mitigate cyber risks, comply with regulatory requirements, and maintain...

6.8AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/15 11:19 a.m.•18 views

Security Bulletin: due to the use of Apache Commons BeanUtils, IBM Transformation Extender Advanced is vulnerable to Improper Access Control vulnerability

Summary Apache Commons BeanUtils is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers . CVE-2024-47554 Vulnerability Details CVEID:CVE-2025-48734 DESCRIPTION: Improper Access Control vulnerability in Apache Commons. A...

8.8CVSS7.2AI score0.01825EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/15 11:19 a.m.•7 views

Security Bulletin: due to the use of Apache Commons Lang, IBM Transformation Extender Advanced is vulnerable to Uncontrolled Recursion vulnerability

Summary Apache Commons Lang is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers . CVE-2024-47554 Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This...

5.3CVSS6.7AI score0.02451EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/15 11:18 a.m.•14 views

Security Bulletin: due to the use of Apache Commons FileUpload, IBM Transformation Extender Advanced is vulnerable to DoS vulnerability

Summary Apache Commons FileUpload is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers. CVE-2024-47554 Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient...

7.5CVSS6.8AI score0.32964EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/10 11:27 a.m.•12 views

Security Bulletin: IBM Transformation Extender Advanced is affected by a IBM WebSphere Application Server Liberty vulnerability

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is vulnerable to IBM WebSphere Application Server Liberty cross-site scripting vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Product...

6.1AI score
SaveExploits0Affected Software1
Rows per page
Query Builder