Lucene search
K

6 matches found

EUVD
EUVD
added 2026/05/12 3:31 a.m.5 views

EUVD-2026-29368

SAPUI5 Search UI allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content. Successful exploitation may mislead victim users into clicking and accessing attacker-controlled pages rendered by the application. This vulnerability has a low...

4.7CVSS5.8AI score0.00249EPSS
Exploits0References3
CVE
CVE
added 2026/05/12 2:19 a.m.12 views

CVE-2026-34258

SAPUI5 (Search UI) is affected by CVE-2026-34258. An unauthenticated attacker can manipulate specific URL parameters in the Search UI to deliver attacker-controlled content, potentially misleading users into clicking on pages rendered by the application. Impact is confined to confidentiality (low...

4.7CVSS5.8AI score0.00249EPSS
Exploits0References2
OSV
OSV
added 2024/12/04 7:15 a.m.2 views

CVE-2024-45717

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction...

4.8CVSS5.8AI score0.00363EPSS
Exploits0References2
OSV
OSV
added 2024/11/22 8:15 p.m.3 views

PYSEC-2024-310

Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario where a specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integration. The Client ...

5.3CVSS5.8AI score0.00628EPSS
Exploits0References3
OSV
OSV
added 2024/11/22 7:58 p.m.4 views

CVE-2024-53253 Sentry's improper error handling leaks Application Integration Client Secret

Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario where a specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integration. The Client ...

5.3CVSS6.6AI score0.00628EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/12/07 12:0 a.m.1 views

PT-2023-9648 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to a component of Oracle Trading Community, specifically the Party Search UI, and is associated with weaknesses in the authorization procedure. This...

8.5CVSS7.8AI score0.004EPSS
Exploits0References4
Rows per page
Query Builder