https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:07:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-01033 bdu:2025-01033 https://cve.radiocsirt.org/vuln/bdu:2025-01033 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0027 certfr-2025-avi-0027 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0027 https://cve.radiocsirt.org/vuln/cnvd-2025-11455 cnvd-2025-11455 https://cve.radiocsirt.org/vuln/cnvd-2025-11455 https://cve.radiocsirt.org/vuln/euvd-2026-210359 EUVD-2026-210359 https://cve.radiocsirt.org/vuln/euvd-2026-210359 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0067 <p>Due to a missing authorization check on service endpoints in the SAP NetWeaver Application Server Java, an attacker with standard user role can create JCo connection entries, which are used for remote function calls from or to the application server. This could lead to low impact on confidentiality, integrity, and availability of the application.</p> <p>Due to a missing authorization check on service endpoints in the SAP NetWeaver Application Server Java, an attacker with standard user role can create JCo connection entries, which are used for remote function calls from or to the application server. This could lead to low impact on confidentiality, integrity, and availability of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-0067 https://cve.radiocsirt.org/vuln/ghsa-wv5f-24hf-9846 <p>Due to a missing authorization check on service endpoints in the SAP NetWeaver Application Server Java, an attacker with standard user role can create JCo connection entries, which are used for remote function calls from or to the application server. This could lead to low impact on confidentiality, integrity, and availability of the application.</p> <p>Due to a missing authorization check on service endpoints in the SAP NetWeaver Application Server Java, an attacker with standard user role can create JCo connection entries, which are used for remote function calls from or to the application server. This could lead to low impact on confidentiality, integrity, and availability of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-wv5f-24hf-9846 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0051 <p>Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen, einen Cross-Site-Scripting-Angriff durchzuführen, beliebigen Code auszuführen und Daten zu manipulieren.</p> <p>Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen, einen Cross-Site-Scripting-Angriff durchzuführen, beliebigen Code auszuführen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0051