https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:03:40.298181+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0369 certfr-2023-avi-0369 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T09:03:40.370860+00:00 certfr-2023-avi-0369 https://cve.radiocsirt.org/vuln/euvd-2026-215048 EUVD-2026-215048 2026-10-02T09:03:40.370904+00:00 EUVD-2026-215048 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29080 fkie_cve-2023-29080 2026-10-02T09:03:40.370919+00:00

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-jgh6-r92w-wgcf GHSA-jgh6-r92w-wgcf 2026-10-02T09:03:40.370951+00:00

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-29080 gsd-2023-29080 2026-10-02T09:03:40.370991+00:00 gsd-2023-29080 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1168 WID-SEC-W-2023-1168 — SAP Patchday Mai 2023 2026-10-02T09:03:40.371010+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.