Lucene search
+L

1609 matches found

BDU FSTEC
BDU FSTEC
•added 2025/09/02 12:00 a.m.•14 views

The vulnerability of the SAP Data Services application for integration and data transformation lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary code.

The vulnerability of the SAP Data Services application for integration and data transformation is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS6.1AI score0.00194EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/01 12:00 a.m.•16 views

The vulnerability of the functional module of the RFC interface of the software tool for managing changes and migrations in SAP Landscape Transformation (SLT) allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functional module of the RFC interface of the software tool for managing changes and migrations in SAP Landscape Transformation SLT is related to improper code generation. Exploiting this vulnerability can allow an attacker to influence the confidentiality, integrity, and...

9.9CVSS6.1AI score0.00697EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/31 12:00 a.m.•73 views

Linux Distros Unpatched Vulnerability : CVE-2025-38590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Remove skb secpath if xfrm state is not found Hardware returns a unique identifier for a decrypted packet's xfrm state, this state is looked up in an...

7.5CVSS6.8AI score0.00367EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/28 3:51 p.m.•5 views

Security Bulletin: IBM Transformation Advisor is affected by vulnerability found in Node.js (CVE-2025-7338)

Summary There is a vulnerability in Node.js used by IBM Transformation Advisor, The issues have been addressed in an update. Vulnerability Details CVEID:CVE-2025-7338 DESCRIPTION: Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version...

7.5CVSS9.1AI score0.00709EPSS
SaveExploits0Affected Software1
Packet Storm News
Packet Storm News
•added 2025/08/26 12:00 a.m.•14 views

CITADEL: Continual Anomaly Detection for Enhanced Learning in IoT Intrusion Detection

The Internet of Things IoT, with its high degree of interconnectivity and limited computational resources, is particularly vulnerable to a wide range of cyber threats. Intrusion detection systems IDS have been extensively studied to enhance IoT security, and machine learning-based IDS ML-IDS show...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2016-6607

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSS issues were discovered in phpMyAdmin. This affects Zoom search specially crafted column content can be used to trigger an XSS attack %NASLMINLEVEL 80900 C...

6.1CVSS7.3AI score0.0132EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2016-5739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content...

7.5CVSS8AI score0.02948EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2016-6618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of- service DoS attack against the server. All 4.6.x version...

6.5CVSS7.4AI score0.01852EPSS
SaveExploits0References2
Redos
Redos
•added 2025/08/22 12:00 a.m.•12 views

ROS-20250822-14

A vulnerability in a library for XSLT conversion of XML documents to other formats is related to a type confusion bug in xmlNode.psvi. type confusion bug in xmlNode.psvi. Exploitation of the vulnerability could allow an attacker to execute arbitrary code on the target system...

7.5CVSS7AI score0.01243EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/18 10:29 a.m.•19 views

Security Bulletin: IBM Cloud Transformation Advisor is affected by multiple vulnerabilities found in Java and Node.js (CVE-2025-48924, CVE-2025-4949)

Summary There are multiple vulnerabilities in Java and Node.js used by IBM Cloud Transformation Advisor. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with...

6.8CVSS7.4AI score0.02451EPSS
SaveExploits1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/14 2:24 a.m.•13 views

CVE-2025-42950

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

9.9CVSS7.6AI score0.00697EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•1 views

CVE-2025-55005: Heap-based Buffer Overflow

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024...

5.5CVSS5.6AI score0.00264EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/12 3:15 a.m.•19 views

CVE-2025-42950

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

9.9CVSS0.00697EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/12 2:08 a.m.•8 views

CVE-2025-42950 Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

9.9CVSS7.5AI score0.00697EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/12 2:08 a.m.•33 views

CVE-2025-42950 Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

9.9CVSS0.00697EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/12 2:08 a.m.•49 views

CVE-2025-42950

SAP Landscape Transformation (SLT) is affected by a CVE-2025-42950 vulnerability in which an attacker with user privileges can exploit a flaw in a function module exposed via RFC to inject arbitrary ABAP code, bypassing authorization checks and potentially compromising confidentiality, integrity,...

9.9CVSS7.5AI score0.00697EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•3 views

CVE-2025-42950: Improper Control of Generation of Code

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

9.9CVSS6AI score0.00697EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•19 views

PT-2025-32610

Name of the Vulnerable Software and Affected Versions: SAP Landscape Transformation SLT affected versions not specified Description: SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a flaw in a function module exposed via Remote Function Call RFC. This enables t...

9.9CVSS7.1AI score0.00697EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•11 views

SAP Landscape Transformation 代码注入漏洞

SAP Landscape Transformation is a tool for system data migration and integration from SAP, Germany. A code injection vulnerability exists in SAP Landscape Transformation SLT that originates from the ability to inject arbitrary ABAP code via RFC...

9.9CVSS7.5AI score0.00697EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the reuse of the xfrm interface after release, which could lead to a double release...

7.8CVSS7.5AI score0.00154EPSS
SaveExploits0References4
Rows per page
Query Builder