https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:22:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04387 bdu:2023-04387 https://cve.radiocsirt.org/vuln/bdu:2023-04387 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0531 certfr-2023-avi-0531 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0531 https://cve.radiocsirt.org/vuln/cnvd-2023-100012 cnvd-2023-100012 https://cve.radiocsirt.org/vuln/cnvd-2023-100012 https://cve.radiocsirt.org/vuln/euvd-2026-8799 EUVD-2026-8799 https://cve.radiocsirt.org/vuln/euvd-2026-8799 https://cve.radiocsirt.org/vuln/fkie_cve-2023-36922 <p>Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension.  On successful exploitation, the attacker can read or modify the system data as well as shut down the system.</p> <p>Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension.  On successful exploitation, the attacker can read or modify the system data as well as shut down the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-36922 https://cve.radiocsirt.org/vuln/ghsa-4qhp-mwrw-89jx <p>Due to programming error in function module or report, SAP NetWeaver ABAP (IS-OIL) - versions 600, 602, 603, 604, 605, 606, 617, 618, 800, 802, 803, 804, 805, 806, 807, allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension.  On successful exploitation, the attacker can read or modify the system data as well as shut down the system.</p> <p>Due to programming error in function module or report, SAP NetWeaver ABAP (IS-OIL) - versions 600, 602, 603, 604, 605, 606, 617, 618, 800, 802, 803, 804, 805, 806, 807, allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension.  On successful exploitation, the attacker can read or modify the system data as well as shut down the system.</p> https://cve.radiocsirt.org/vuln/ghsa-4qhp-mwrw-89jx https://cve.radiocsirt.org/vuln/gsd-2023-36922 gsd-2023-36922 https://cve.radiocsirt.org/vuln/gsd-2023-36922 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1705 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code oder Betriebssystembefehle auszuführen, Sicherheitsmechanismen zu umgehen, einen Denial of Service-Zustand auszulösen oder Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code oder Betriebssystembefehle auszuführen, Sicherheitsmechanismen zu umgehen, einen Denial of Service-Zustand auszulösen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1705