Medium - CVE-2025-42991 - SAP S/4HANA (Bank Account Application) does not...
SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of...
Medium - CVE-2025-42993 - Due to a missing authorization check...
Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration could create an RFC destination and...
High - CVE-2025-42994 - SAP MDM Server ReadString function allows an...
SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit...
High - CVE-2025-42995 - SAP MDM Server Read function allows an attacker...
SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly...
Medium - CVE-2025-42996 - SAP MDM Server allows an attacker to gain...
SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modify non-sensitive...
Medium - CVE-2025-42998 - The security settings in the SAP Business One...
The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages. This leads to low...
High - CVE-2025-5906 - A vulnerability classified as critical has been...
A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is...
High - CVE-2025-5907 - A vulnerability classified as critical was...
A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST...
High - CVE-2025-5908 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This issue affects some unknown processing of the file /boafrm/formIpQoS of the...
High - CVE-2025-5909 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. Affected is an unknown function of the file /boafrm/formReflashClientTbl of the...