Vulnerabilities > Low

DATE CVE VULNERABILITY TITLE RISK
2025-03-11 CVE-2024-41760 IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations.
network
high complexity
CWE-203
3.7
2025-03-11 CVE-2025-26655 SAP Just In Time(JIT) does not perform necessary authorization checks for an authenticated user, allowing attacker to escalate privileges that would otherwise be restricted, potentially causing a low impact on the integrity of the application.Confidentiality and Availability are not impacted.
network
high complexity
CWE-862
3.1
2025-03-11 CVE-2025-27430 Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information.
network
high complexity
CWE-918
3.5
2025-03-11 CVE-2025-27432 The eDocument Cockpit (Inbound NF-e) in SAP Electronic Invoicing for Brazil allows an authenticated attacker with certain privileges to gain unauthorized access to each transaction.
low complexity
CWE-862
2.4
2025-03-10 CVE-2024-52905 IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 could disclose sensitive database information to a privileged user.
network
low complexity
CWE-497
2.7
2025-03-10 CVE-2025-25615 Unspecified vulnerability in Changeweb Unifiedtransform 2.0
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.
network
low complexity
changeweb
2.7
2025-03-09 CVE-2025-2124 A vulnerability, which was classified as problematic, was found in Control iD RH iD 25.2.25.0.
network
low complexity
CWE-94
3.5
2025-03-09 CVE-2025-2119 A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226.
high complexity
2.0
2025-03-09 CVE-2025-2114 A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7.
network
high complexity
CWE-266
3.7
2025-03-06 CVE-2025-2032 A vulnerability classified as problematic was found in ChestnutCMS 1.5.2.
low complexity
CWE-22
3.5