Lucene search
+L

1034 matches found

NCSC
NCSC
added 2025/10/23 1:49 p.m.20 views

Vulnerabilities fixed in Oracle Hyperion

Oracle has fixed several vulnerabilities in Oracle Hyperion, including Hyperion Financial Management and Hyperion Data Relationship Management. The vulnerabilities in Oracle Hyperion allow unauthenticated attackers to gain access to the system, which can lead to unauthorized data access and...

9.8CVSS7.3AI score0.50445EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/10/15 4:43 p.m.11 views

CVE-2025-42910

Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...

9CVSS6.8AI score0.00479EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/14 1:15 a.m.12 views

CVE-2025-42910

Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...

9CVSS0.00479EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/14 12:18 a.m.10 views

CVE-2025-42910 Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management

Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...

9CVSS6.5AI score0.00479EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/14 12:18 a.m.29 views

CVE-2025-42910 Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management

Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...

9CVSS0.00479EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/14 12:18 a.m.11 views

EUVD-2025-34120

Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...

9CVSS6.3AI score0.00479EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/14 12:18 a.m.44 views

CVE-2025-42910

CVE-2025-42910 affects SAP Supplier Relationship Management (SRM). The issue stems from missing verification of uploaded file type/content, allowing an authenticated attacker to upload arbitrary files (potentially executable). Successful exploitation could impact confidentiality, integrity, and a...

9CVSS6.5AI score0.00479EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.14 views

SAP Supplier Relationship Management 代码问题漏洞

SAP Supplier Relationship Management SRM is a supplier relationship management solution from SAP, Germany. The product automates purchasing and acquisition processes within an organization and between suppliers, and provides functionality such as invoicing. A code issue vulnerability exists in SA...

9CVSS7.2AI score0.00479EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/13 5:29 a.m.20 views

CVE-2025-60378

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...

8.1CVSS7.2AI score0.01079EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/10/10 12:00 a.m.20 views

CVE-2025-60378

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...

0.01079EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/10/08 12:00 a.m.16 views

WukongCRM 安全漏洞

WukongCRM is a Customer Relationship Management CRM system from Wukong, China. A security vulnerability exists in WukongCRM version 9.0-JAVA, which stems from a fastjson deserialization issue in the /OaExamine/setOaExamine interface that could lead to arbitrary code execution...

6.5CVSS7.7AI score0.00361EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2014-4090

Malware in sbrugna...

5.8CVSS6.4AI score0.01282EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-1999-0535

Malware in sbrugna...

10CVSS6.4AI score0.01891EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-1999-0566

Malware in sbrugna...

10CVSS6.4AI score0.01891EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2018-15063

Malware in sbrugna...

7.7CVSS7.9AI score0.02006EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-1134

Malware in sbrugna...

6.1CVSS6.3AI score0.00648EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2006-5596

Malware in sbrugna...

10CVSS6.4AI score0.01353EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-5457

Malware in sbrugna...

7.5CVSS7.5AI score0.02169EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-1999-0513

Malware in sbrugna...

10CVSS6.2AI score0.01891EPSS
SaveExploits4References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2007-3853

Malware in sbrugna...

7.5CVSS6.4AI score0.02739EPSS
SaveExploits0References13
Rows per page
Query Builder