CVE-2025-3931

Yggdrasil (the system daemon that uses a D-Bus message broker to route data to worker processes) has a local privilege escalation flaw (CVE‑2025‑3931) due to missing authentication/authorization when dispatching messages to workers. An attacker with local system access could leverage this unprote...

Yggdrasil 安全漏洞

Yggdrasil is an open source scalable routing solution from Yggdrasil Network. A security vulnerability exists in Yggdrasil that stems from a lack of authentication and authorization checks that could lead to local elevation of privilege...

Alibaba Cloud Linux 3 : 0017: postgresql:12 (ALINUX3-SA-2021:0017)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0017 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-14349: It was found that PostgreS...

CVE-2025-43011

Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availabili...

CVE-2025-43007

SAP Service Parts Management SPM does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on confidentiality, integrity and availability of the application...

CVE-2025-43009

SAP Service Parts Management SPM does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application...

CVE-2025-43011

The CVE-2025-43011 entry concerns SAP Landscape Transformation (PCL Basis module) lacking necessary authorization checks under certain conditions, allowing authenticated users to access restricted functionalities or data. The exploited impact is limited to confidentiality (high impact reported); ...

CVE-2025-43010 Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL))

SAP S/4HANA Cloud Private Edition or on Premise SCM Master Data Layer MDL allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs, including SAP standard programs. This is due to lack of input validation an...

CVE-2025-43010 Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL))

SAP S/4HANA Cloud Private Edition or on Premise SCM Master Data Layer MDL allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs, including SAP standard programs. This is due to lack of input validation an...

CVE-2025-43009 Missing Authorization check in SAP Service Parts Management (SPM)

SAP Service Parts Management SPM does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application...

CVE-2025-43007

SAP Service Parts Management (SPM) has a privilege-escalation issue due to missing authorization checks for authenticated users. Underlying cause per the CVE is lack of proper authorization validation, with a disclosed impact described as low across confidentiality, integrity, and availability. T...

CVE-2025-43007 Missing Authorization check in SAP Service Parts Management (SPM)

SAP Service Parts Management SPM does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on confidentiality, integrity and availability of the application...

SAP ERP HCM和SAP S/4HANA 安全漏洞

SAP ERP HCM and SAP S/4HANA are both products of SAP, an enterprise human resource management solution, and SAP S/4HANA, an enterprise resource management software based on the SAP HANA in-memory database system. SAP ERP HCM and SAP S/4HANA have an authorization issue vulnerability that stems fro...

PT-2025-20821 · Sap · Sap Service Parts Management

Name of the Vulnerable Software and Affected Versions: SAP Service Parts Management SPM affected versions not specified Description: The issue is related to the lack of necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has a low impact on...

PT-2025-20823 · Sap · Sap Landscape Transformation

Name of the Vulnerable Software and Affected Versions: SAP Landscape Transformation affected versions not specified Description: The issue arises from the PCL Basis module of SAP Landscape Transformation not performing necessary authorization checks under certain conditions. This allows...

Fortinet FortiManager 安全漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment an...

PT-2025-20819 · Sap · Sap Service Parts Management

Name of the Vulnerable Software and Affected Versions: SAP Service Parts Management SPM affected versions not specified Description: The issue is related to the lack of necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has a low impact on...

SAP Service Parts Management 安全漏洞

SAP Service Parts Management is an intelligent spare parts supply chain solution for after-sales service from SAP. An authorization issue vulnerability exists in SAP Service Parts Management, which stems from a lack of authorization checking, no details of the vulnerability are available at this...

SAP S4CORE 安全漏洞

SAP S4CORE is an application for managing procurement contracts from SAP. SAP S4CORE suffers from an information disclosure vulnerability that stems from a lack of authorization checks, which can be exploited by an attacker to cause information disclosure...

SAP S/4HANA Cloud Private 代码注入漏洞

SAP S/4HANA Cloud Private is a private cloud-deployed, enterprise-grade, intelligent ERP suite based on in-memory computing architecture from SAP, Germany. A code injection vulnerability exists in SAP S/4HANA Cloud Private, which stems from a lack of input validation and authorization checking an...