Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:32:22 +0000 bdu:2023-04572 https://cve.radiocsirt.org/vuln/bdu:2023-04572 bdu:2023-04572 https://cve.radiocsirt.org/vuln/bdu:2023-04572 certfr-2023-avi-0531 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… https://cve.radiocsirt.org/vuln/certfr-2023-avi-0531 certfr-2023-avi-0531 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0531 EUVD-2026-196681 https://cve.radiocsirt.org/vuln/euvd-2026-196681 EUVD-2026-196681 https://cve.radiocsirt.org/vuln/euvd-2026-196681 fkie_cve-2023-33988 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33988 <p>In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated attacker to attempt reflected cross-site scripting, which could result in disclosure or modification of information.</p> <p>In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated attacker to attempt reflected cross-site scripting, which could result in disclosure or modification of information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-33988 GHSA-vr8f-3gcr-v88v https://cve.radiocsirt.org/vuln/ghsa-vr8f-3gcr-v88v <p>In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated attacker to attempt reflected cross-site scripting, which could result in disclosure or modification of information.</p> <p>In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated attacker to attempt reflected cross-site scripting, which could result in disclosure or modification of information.</p> https://cve.radiocsirt.org/vuln/ghsa-vr8f-3gcr-v88v gsd-2023-33988 https://cve.radiocsirt.org/vuln/gsd-2023-33988 gsd-2023-33988 https://cve.radiocsirt.org/vuln/gsd-2023-33988 WID-SEC-W-2023-1705 — SAP Patchday Juli 2023 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1705 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code oder Betriebssystembefehle auszuführen, Sicherheitsmechanismen zu umgehen, einen Denial of Service-Zustand auszulösen oder Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code oder Betriebssystembefehle auszuführen, Sicherheitsmechanismen zu umgehen, einen Denial of Service-Zustand auszulösen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1705