2 matches found
CVE-2026-89120: Initialization of a Resource with an Insecure Default
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests,...
7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References2
SUSE CVE-2019-9937
In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5hash.c and ext/fts5/fts5index.c...
3.3CVSS6.9AI score0.06086EPSS
SaveExploits0References34
20