Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Court Reservation WordPress plugin before 1.10.9 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete them via aCheck if you run itEPSS 0.14%Mar 10, 2026
- High7.5The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the 'ajax_create_import' function.Check if you run itEPSS 0.41%Mar 10, 2026
- Medium5.3The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check onCheck if you run itEPSS 0.26%Mar 10, 2026
- Medium5.3The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiCheck if you run itEPSS 0.30%Mar 10, 2026
- Medium6.1Affected Product(s)Version(s)InfoSphere Data Architect9.2.1Check if you run itEPSS 0.18%Mar 10, 2026
- Medium4.4IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.Check if you run itEPSS 0.09%Mar 10, 2026
- High7.7Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remCheck if you run itEPSS 0.43%Mar 10, 2026
- Medium5.0Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a speciCheck if you run itEPSS 0.26%Mar 10, 2026
- Medium5.8Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company.Check if you run itEPSS 0.30%Mar 10, 2026
- Medium5.9Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module.Check if you run itEPSS 0.25%Mar 10, 2026
- Critical9.1SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a high impact oCheck if you run itEPSS 0.61%Mar 10, 2026
- Medium6.4SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled inputCheck if you run itEPSS 0.31%Mar 10, 2026
- Medium5.0SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application.Check if you run itEPSS 0.21%Mar 10, 2026
- Medium6.4SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints.Check if you run itEPSS 0.19%Mar 10, 2026
- Medium5.0SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be diCheck if you run itEPSS 0.24%Mar 10, 2026
- Medium5.6The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms.Check if you run itEPSS 0.10%Mar 10, 2026
- Medium4.3Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive informCheck if you run itEPSS 0.22%Mar 10, 2026
- Medium6.4Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert entCheck if you run itEPSS 0.24%Mar 10, 2026
- Medium6.1Due to insufficient validation of user-controlled input in the URLs query parameter.Check if you run itEPSS 0.26%Mar 10, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/URLResolver.jsCheck if you run itEPSS 0.55%Mar 10, 2026
- High8.1PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic.Check if you run itEPSS 0.29%Mar 10, 2026
- High8.1PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism.Check if you run itEPSS 0.29%Mar 10, 2026
- High7.8Buffer Overflow vulnerability in Uderzo Software SpaceSniffer v.2.0.5.18 allows a remote attacker to execute arbitrary code via a crafted .sns snapshot file.Check if you run itEPSS 0.31%Mar 10, 2026
- High8.4Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.Check if you run itEPSS 0.21%Mar 10, 2026
- High8.4Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.Check if you run itEPSS 0.21%Mar 10, 2026
Sort