CVE-2025-42883

Migration Workbench DX Workbench in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious file into the system. This results in a low...

CVE-2025-42883

Affected software: SAP NetWeaver Application Server for ABAP, Migration Workbench (DX Workbench). Vulnerability details: A code issue causes the Migration Workbench to fail to trigger a malware scan when a user with administrative privileges uploads files to the application server, allowing poten...

EUVD-2011-3371

Malware in sbrugna...

EUVD-2020-3270

Malware in sbrugna...

EUVD-2015-6056

Malware in sbrugna...

EUVD-2020-3274

Malware in sbrugna...

EUVD-2015-3182

Malware in sbrugna...

EUVD-2020-3272

Malware in sbrugna...

EUVD-2016-4295

Malware in sbrugna...

CVE-2025-54089

CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexity is low; there are no attack requirements. Privileges...

EUVD-2025-32209

Malicious code in bioql PyPI...

EUVD-2025-30426

Malicious code in bioql PyPI...

EUVD-2025-27204

Malicious code in bioql PyPI...

EUVD-2021-31655

Malicious code in bioql PyPI...

EUVD-2025-27211

Malicious code in bioql PyPI...

EUVD-2025-24216

Malicious code in bioql PyPI...

CVE-2025-54089 Cross-site Scripting vulnerability in Secure Access prior to 14.10

CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexity is low; there are no attack requirements. Privileges...

CVE-2025-54089 Cross-site Scripting vulnerability in Secure Access prior to 14.10

CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexity is low; there are no attack requirements. Privileges...

CVE-2025-54087 Server-side request forgery in Secure Access

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, there are no attack requirements, and...

CVE-2025-54087 Server-side request forgery in Secure Access

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, there are no attack requirements, and...