37726 matches found
EUVD-2026-35280
Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the confidentiality of the data. There is no impact on integrity and availability of the application...
EUVD-2026-35277
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system...
CVE-2026-24315
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system...
CVE-2026-24315 Path Traversal Vulnerability in SAP Fiori (launchpad)
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system...
PT-2026-48599
Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description The HTJ2K High-Throughput JPEG 2000 decoder in OpenEXRCore contains a heap-buffer-overflow READ in the ht undo impl function. This occurs because the function copies decoded pixels from a...
PT-2026-47696
DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-47698
Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-47699
DoS vulnerability in the browser kernel. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-47702
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-47692
Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-47539
SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...
PT-2026-47697
Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...
OPENSUSE-SU-2026:10977-1 MozillaFirefox-151.0.3-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-151.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10978-1 SDL3_sound-devel-3.2.0-1.1 on GA media
These are all security issues fixed in the SDL3sound-devel-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10990-1 python-M2Crypto-doc-0.48.0-1.1 on GA media
These are all security issues fixed in the python-M2Crypto-doc-0.48.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-48129
Name of the Vulnerable Software and Affected Versions AMD uProf affected versions not specified Description Unrestricted resource allocation in AMD uProf may be exploited to consume excessive system resources, which could potentially lead to a loss of availability. Recommendations At the moment,...
PT-2026-47693
Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-48596
Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description A heap buffer overflow occurs due to an integer overflow. A heap buffer overflow is a memory corruption issue where data is written beyond the boundaries of a buffer allocated on the heap,...
PT-2026-47694
Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability...
SAP NetWeaver ABAP Platform 安全漏洞
SAP NetWeaver ABAP Platform is an integrated technology platform developed by the German company SAP. There is a security vulnerability in SAP NetWeaver ABAP Platform, which stems from improper validation of RFC protocols. This vulnerability allows unauthorized attackers to send specially crafted...