Lucene search
+L

954 matches found

RedhatCVE
RedhatCVE
added 2026/01/21 10:25 p.m.11 views

CVE-2026-21978

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Relationship Pricing. Supported versions that are affected are 14.0.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

6.5CVSS5.5AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/21 12:31 a.m.14 views

EUVD-2026-3534

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Relationship Pricing. Supported versions that are affected are 14.0.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

6.5CVSS5.5AI score0.00256EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/20 10:16 p.m.15 views

CVE-2026-21978

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Relationship Pricing. Supported versions that are affected are 14.0.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

6.5CVSS5.8AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/20 10:16 p.m.17 views

CVE-2026-21978

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Relationship Pricing. Supported versions that are affected are 14.0.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

6.5CVSS0.00256EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/20 9:56 p.m.4 views

CVE-2026-21978

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Relationship Pricing. Supported versions that are affected are 14.0.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

6.5CVSS7.2AI score0.00256EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/20 12:00 a.m.16 views

PT-2026-3725

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 14.0.0.0.0 through 14.8.0.0.0 Description An easily exploitable issue exists in the Relationship Pricing component of Oracle FLEXCUBE Universal Banking. A low-privileged attacker with network access v...

6.5CVSS7.4AI score0.00256EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/17 12:00 a.m.11 views

WordPress plugin: Integrating Dynamics 365 CRM – Cross-site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

4.4CVSS5.7AI score0.00215EPSS
SaveExploits0References5
OSV
OSV
added 2026/01/13 2:15 a.m.14 views

CVE-2026-0513

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management SICF Handler in SRM Catalog, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application...

4.7CVSS5.8AI score0.00178EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/13 1:15 a.m.41 views

CVE-2026-0513 Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management SICF Handler in SRM Catalog, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application...

4.7CVSS0.00178EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/13 1:15 a.m.4 views

CVE-2026-0513 Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management SICF Handler in SRM Catalog, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application...

4.7CVSS6.4AI score0.00178EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/13 1:15 a.m.38 views

CVE-2026-0513

CVE-2026-0513 describes an Open Redirect vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog). An unauthenticated attacker can craft a malicious URL that, when visited by a victim, redirects to an attacker-controlled site. Impact is described as low for integrity; c...

4.7CVSS6.4AI score0.00178EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.8 views

SAP Supplier Relationship Management 输入验证错误漏洞

SAP Supplier Relationship Management SRM is a supplier relationship management solution from SAP. The product automates purchasing and acquisition processes within an organization and between suppliers, and provides functionality such as invoicing. An input validation error vulnerability exists i...

4.7CVSS5.7AI score0.00178EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.17 views

PT-2026-2344

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management affected versions not specified Description An unauthenticated attacker could exploit an Open Redirect in the SICF Handler within the SRM Catalog component of SAP Supplier Relationship Management. This allo...

4.7CVSS6.2AI score0.00178EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/09 12:52 p.m.15 views

CVE-2014-4161

Cross-site scripting XSS vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management SRM allows remote attackers to inject arbitrary web script or HTML via the url parameter...

4.3CVSS5.9AI score0.01161EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:42 a.m.13 views

CVE-1999-0539

A trust relationship exists between two Unix hosts...

10CVSS7AI score0.01855EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:38 a.m.7 views

CVE-1999-0583

There is a one-way or two-way trust relationship between Windows NT domains...

10CVSS7AI score0.01907EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/04 11:02 a.m.34 views

CVE-2025-15442

CVE-2025-15442 affects CRMEB up to version 5.6.1. The vulnerability resides in the code path handling the file /adminapi/export/product_list, where manipulation of the argument cate_id leads to a SQL injection. A remote attacker could exploit this (no user interaction required). Public exploit gu...

7.2CVSS5.3AI score0.00374EPSS
SaveExploits1References5Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.14 views

WordPress CRM Memberships plugin <= 2.5 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpoint vulnerability

Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrmchangepassword' AJAX Endpoint vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin CRM Memberships versions = 2.5...

9.8CVSS5.9AI score0.00547EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2025/12/27 1:43 p.m.158 views

Small-Customer-Relationship-Management-CRM-in-PHP

No d...

7AI score
SaveExploits0
NVD
NVD
added 2025/12/18 8:16 a.m.10 views

CVE-2025-60090

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through = 1.1.6...

9.8CVSS0.00459EPSS
SaveExploits0References1
Rows per page
Query Builder