Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and export the contents of database tables into an ABAP report.Check if you run itEPSS 0.31%Dec 9, 2025
- Critical9.9Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module.Check if you run itEPSS 4.50%Dec 9, 2025
- High8.2SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production.Check if you run itEPSS 0.36%Dec 9, 2025
- High7.5SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerabilCheck if you run itEPSS 0.54%Dec 9, 2025
- High7.1Due to a Missing Authorization Check vulnerability in SAP S/4 HANA Private Cloud (Financials General Ledger), an authenticated attacker with authorization limited to a single compaCheck if you run itEPSS 0.30%Dec 9, 2025
- Medium6.6The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, vCheck if you run itEPSS 0.34%Dec 9, 2025
- High7.9SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input valiCheck if you run itEPSS 0.47%Dec 9, 2025
- Medium5.9SAPUI5 (and OpenUI5) packages use outdated 3rd party libraries with known security vulnerabilities.Check if you run itEPSS 0.38%Dec 9, 2025
- Medium6.1Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of otheCheck if you run itEPSS 0.26%Dec 9, 2025
- Low1.3matrix-sdk-base is the base component to build a Matrix client library.Check if you run itEPSS 0.41%Dec 9, 2025
- Critical9.3The ruby-saml library implements the client side of an SAML authorization.Check if you run itEPSS 0.25%Dec 9, 2025
- Critical9.3The ruby-saml library is for implementing the client side of a SAML authorization.Check if you run itEPSS 0.42%Dec 9, 2025
- Critical9.3Fiber Utils is a collection of common functions created for Fiber.Check if you run itEPSS 0.47%Dec 9, 2025
- Medium6.51Panel is an open-source, web-based control panel for Linux server management.Check if you run itEPSS 0.25%Dec 9, 2025
- Medium6.9A vulnerability was determined in Tenda AC9 15.03.05.14_multi.Check if you run itEPSS 0.68%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: Reposition and add pcm_mutex If panic_on_warn is set and compress stream(DPCM) is started, tCheck if you run itEPSS 0.18%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: btrfs: fix warning when putting transaction with qgroups enabled after abort If we have a transaction abort withCheck if you run itEPSS 0.23%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() When disabling overlay plane in mxsfb_pCheck if you run itEPSS 0.22%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in fdb dumps syzbot reports that some netdev devices do not haveCheck if you run itEPSS 0.26%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: hfs: fix missing hfs_bnode_get() in __hfs_bnode_create Syzbot found a kernel BUG in hfs_bnode_put(): kernel BUGCheck if you run itEPSS 0.19%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will triCheck if you run itEPSS 0.23%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protection dm looks up the table for IO based on the request type, withCheck if you run itEPSS 0.18%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: s390/idle: mark arch_cpu_idle() noinstr linux-next commit ("cpuidle: tracing: Warn about !rcu_is_watching()") adCheck if you run itEPSS 0.22%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error If clk_get_rate() fails,Check if you run itEPSS 0.24%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bpf: bpf_sk_storage: Fix invalid wait context lockdep report './test_progs -t test_local_storage' reported a splCheck if you run itEPSS 0.22%Dec 9, 2025
Sort