https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:58:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08513 bdu:2024-08513 https://cve.radiocsirt.org/vuln/bdu:2024-08513 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0844 certfr-2024-avi-0844 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0844 https://cve.radiocsirt.org/vuln/cnvd-2024-49628 cnvd-2024-49628 https://cve.radiocsirt.org/vuln/cnvd-2024-49628 https://cve.radiocsirt.org/vuln/euvd-2026-193722 EUVD-2026-193722 https://cve.radiocsirt.org/vuln/euvd-2026-193722 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45278 <p>SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.</p> <p>SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45278 https://cve.radiocsirt.org/vuln/ghsa-j5g9-vffg-hxrm <p>SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.</p> <p>SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-j5g9-vffg-hxrm https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3093 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen und einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen und einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3093