https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 08:35:02 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0301 certfr-2023-avi-0301 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0301 https://cve.radiocsirt.org/vuln/euvd-2026-214281 EUVD-2026-214281 https://cve.radiocsirt.org/vuln/euvd-2026-214281 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27499 <p>SAP GUI for HTML - versions KERNEL 7.22, 7.53, 7.54, 7.77, 7.81, 7.85, 7.89, 7.91, KRNL64UC, 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT does not sufficiently encode user-controlled inputs, resulting in a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could craft a malicious URL and lure the victim to click, the script supplied by the attacker will execute in the victim user&#39;s browser. The information from the victim&#39;s web browser can either be modified or read and sent to the attacker.</p> <p>SAP GUI for HTML - versions KERNEL 7.22, 7.53, 7.54, 7.77, 7.81, 7.85, 7.89, 7.91, KRNL64UC, 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT does not sufficiently encode user-controlled inputs, resulting in a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could craft a malicious URL and lure the victim to click, the script supplied by the attacker will execute in the victim user&#39;s browser. The information from the victim&#39;s web browser can either be modified or read and sent to the attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-27499 https://cve.radiocsirt.org/vuln/ghsa-mqmw-59rf-wv9g <p>SAP GUI for HTML - versions KERNEL 7.22, 7.53, 7.547.77, 7.81, 7.85, 7.89, 7.91, KRNL64UC, 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT does not sufficiently encode user-controlled inputs, resulting in a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could craft a malicious URL and lure the victim to click, the script supplied by the attacker will execute in the victim user&#39;s browser. The information from the victim&#39;s web browser can either be modified or read and sent to the attacker.</p> <p>SAP GUI for HTML - versions KERNEL 7.22, 7.53, 7.547.77, 7.81, 7.85, 7.89, 7.91, KRNL64UC, 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT does not sufficiently encode user-controlled inputs, resulting in a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could craft a malicious URL and lure the victim to click, the script supplied by the attacker will execute in the victim user&#39;s browser. The information from the victim&#39;s web browser can either be modified or read and sent to the attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-mqmw-59rf-wv9g https://cve.radiocsirt.org/vuln/gsd-2023-27499 gsd-2023-27499 https://cve.radiocsirt.org/vuln/gsd-2023-27499 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0904 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0904