https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:06:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-14598 bdu:2026-14598 https://cve.radiocsirt.org/vuln/bdu:2026-14598 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0256 certfr-2026-avi-0256 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0256 https://cve.radiocsirt.org/vuln/euvd-2026-275271 EUVD-2026-275271 https://cve.radiocsirt.org/vuln/euvd-2026-275271 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27684 <p>SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input fields. The application concatenates these inputs directly into SQL queries without proper validation or escaping. As a result, an attacker can manipulate the WHERE clause logic and potentially gain unauthorized access to or modify database information. This vulnerability has no impact on integrity and low impact on the confidentiality and availability of the application.</p> <p>SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input fields. The application concatenates these inputs directly into SQL queries without proper validation or escaping. As a result, an attacker can manipulate the WHERE clause logic and potentially gain unauthorized access to or modify database information. This vulnerability has no impact on integrity and low impact on the confidentiality and availability of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-27684 https://cve.radiocsirt.org/vuln/ghsa-qh9r-rhxc-jw9f <p>SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input fields. The application concatenates these inputs directly into SQL queries without proper validation or escaping. As a result, an attacker can manipulate the WHERE clause logic and potentially gain unauthorized access to or modify database information. This vulnerability has no impact on integrity and low impact on the confidentiality and availability of the application.</p> <p>SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input fields. The application concatenates these inputs directly into SQL queries without proper validation or escaping. As a result, an attacker can manipulate the WHERE clause logic and potentially gain unauthorized access to or modify database information. This vulnerability has no impact on integrity and low impact on the confidentiality and availability of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-qh9r-rhxc-jw9f https://cve.radiocsirt.org/vuln/ncsc-2026-0091 NCSC-2026-0091 https://cve.radiocsirt.org/vuln/ncsc-2026-0091 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0647 <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0647