Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:39:53 +0000 certfr-2024-avi-1054 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… https://cve.radiocsirt.org/vuln/certfr-2024-avi-1054 certfr-2024-avi-1054 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1054 EUVD-2026-206652 https://cve.radiocsirt.org/vuln/euvd-2026-206652 EUVD-2026-206652 https://cve.radiocsirt.org/vuln/euvd-2026-206652 fkie_cve-2024-47582 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47582 <p>Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.</p> <p>Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47582 GHSA-rmmh-6g98-m869 https://cve.radiocsirt.org/vuln/ghsa-rmmh-6g98-m869 <p>Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.</p> <p>Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-rmmh-6g98-m869 WID-SEC-W-2024-3640 — SAP Patchday Dezember 2024: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3640 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Daten zu verändern, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Daten zu verändern, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3640