Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with a classic personal access token (PAT) lacki…Check if you run itEPSS 0.42%Mar 10, 2026
- High8.1PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic.Check if you run itEPSS 0.31%Mar 10, 2026
- High8.1PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism.Check if you run itEPSS 0.30%Mar 10, 2026
- High8.8Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents.Check if you run itEPSS 0.60%Mar 10, 2026
- High8.6Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents.Check if you run itEPSS 0.46%Mar 10, 2026
- Medium5.3OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.37%Mar 10, 2026
- Critical9.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.50%Mar 10, 2026
- High8.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.22%Mar 10, 2026
- Medium5.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.44%Mar 10, 2026
- Medium5.0Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log File…Check if you run itEPSS 0.29%Mar 10, 2026
- Medium5.8Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company.Check if you run itEPSS 0.34%Mar 10, 2026
- Medium5.9Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module.Check if you run itEPSS 0.30%Mar 10, 2026
- Medium5.0SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system informa…Check if you run itEPSS 0.21%Mar 10, 2026
- Medium4.3Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sen…Check if you run itEPSS 0.20%Mar 10, 2026
- Medium6.4Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify…Check if you run itEPSS 0.21%Mar 10, 2026
- Critical9.1Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6, including 9.3.x and 8.3.x, do not restrict Groovy scripts in new PRPT reports published…Check if you run itEPSS 0.39%Mar 10, 2026
- High7.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.36%Mar 10, 2026
- Low2.3Misskey is an open source, federated social media platform.Check if you run itEPSS 0.28%Mar 10, 2026
- High8.7Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.30%Mar 9, 2026
- Medium5.9Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore dele…Check if you run itEPSS 0.24%Mar 9, 2026
- Critical9.1Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data.Check if you run itEPSS 0.27%Mar 9, 2026
- Critical9.1Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to upload and apply arbitrary updates.Check if you run itEPSS 0.41%Mar 9, 2026
- Low2.1A flaw has been found in SourceCodester Computer Laboratory Management System 1.0.Check if you run itEPSS 0.32%Mar 8, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.35%Mar 7, 2026
- Medium4.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.35%Mar 7, 2026