https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:33:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01764 bdu:2024-01764 https://cve.radiocsirt.org/vuln/bdu:2024-01764 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0369 certfr-2023-avi-0369 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0369 https://cve.radiocsirt.org/vuln/euvd-2026-212337 EUVD-2026-212337 https://cve.radiocsirt.org/vuln/euvd-2026-212337 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30744 <p>In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can attach to an open interface and make use of an open naming and directory API to instantiate an object which has methods which can be called without further authorization and authentication.  A subsequent call to one of these methods can read or change the state of existing services without any effect on availability.</p> <p>In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can attach to an open interface and make use of an open naming and directory API to instantiate an object which has methods which can be called without further authorization and authentication.  A subsequent call to one of these methods can read or change the state of existing services without any effect on availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-30744 https://cve.radiocsirt.org/vuln/ghsa-464f-pfvj-h8rq <p>In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can attach to an open interface and make use of an open naming and directory API to instantiate an object which has methods which can be called without further authorization and authentication.  A subsequent call to one of these methods can read or change the state of existing services without any effect on availability.</p> <p>In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can attach to an open interface and make use of an open naming and directory API to instantiate an object which has methods which can be called without further authorization and authentication.  A subsequent call to one of these methods can read or change the state of existing services without any effect on availability.</p> https://cve.radiocsirt.org/vuln/ghsa-464f-pfvj-h8rq https://cve.radiocsirt.org/vuln/gsd-2023-30744 gsd-2023-30744 https://cve.radiocsirt.org/vuln/gsd-2023-30744 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1168 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1168