https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:16:58 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0114 certfr-2025-avi-0114 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0114 https://cve.radiocsirt.org/vuln/cnvd-2025-03435 cnvd-2025-03435 https://cve.radiocsirt.org/vuln/cnvd-2025-03435 https://cve.radiocsirt.org/vuln/euvd-2026-218554 EUVD-2026-218554 https://cve.radiocsirt.org/vuln/euvd-2026-218554 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24876 <p>The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and integrity of the application</p> <p>The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and integrity of the application</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24876 https://cve.radiocsirt.org/vuln/ghsa-cpfx-964w-4jvp <p><strong>Affected:</strong> npm: @sap/approuter</p> <p>The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code, an attacker can steal the session of the victim by injecting malicious payload, causing High impact on confidentiality and integrity of the application.</p> <p><strong>Affected:</strong> npm: @sap/approuter</p> <p>The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code, an attacker can steal the session of the victim by injecting malicious payload, causing High impact on confidentiality and integrity of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-cpfx-964w-4jvp https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0307 <p>Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um erhöhte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting- und Spoofing-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um erhöhte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting- und Spoofing-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0307