Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unauthorized information.Check if you run itEPSS 0.25%Nov 11, 2025
- Medium6.9Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead toCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium6.8Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitraCheck if you run itEPSS 0.30%Nov 11, 2025
- Medium6.1Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attackeCheck if you run itEPSS 0.24%Nov 11, 2025
- Medium6.8Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafCheck if you run itEPSS 0.79%Nov 11, 2025
- Critical10.0SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitraryCheck if you run itEPSS 0.69%Nov 11, 2025
- Medium5.4SAP Starter Solution allows an authenticated attacker to execute crafted database queries, thereby exposing the back-end database.Check if you run itEPSS 0.20%Nov 11, 2025
- Medium5.5SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerabilityCheck if you run itEPSS 0.12%Nov 11, 2025
- Critical9.9Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module.Check if you run itEPSS 0.60%Nov 11, 2025
- Medium6.1Due to a Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could generate a malicious link and make it publicly accessible.Check if you run itEPSS 0.26%Nov 11, 2025
- Medium5.8Due to missing authentication, SAP HANA 2.0 (hdbrss) allows an unauthenticated attacker to call a remote-enabled function that will enable them to view information.Check if you run itEPSS 0.33%Nov 11, 2025
- Medium6.5SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an uniCheck if you run itEPSS 0.28%Nov 11, 2025
- Low2.7Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to theCheck if you run itEPSS 0.27%Nov 11, 2025
- Medium4.3Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with basic privileges could execute a specific function module in ABAPCheck if you run itEPSS 0.24%Nov 11, 2025
- High7.0Microsoft Windows Race Condition VulnerabilityPatch nowKEVEPSS 4.46%Nov 11, 2025
- High7.7An issue in Agnitum Outpost Security Suite 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842) allows a local attacker to execute arbitrary code via the lock function.Check if you run itEPSS 0.22%Nov 11, 2025
- High7.5A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the appliance by exploitinCheck if you run itEPSS 0.71%Nov 10, 2025
- High8.6An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label filter that could leCheck if you run itEPSS 0.70%Nov 10, 2025
- Low2.7SpiceDB is an open source database system for creating and managing security-critical application permissions.Check if you run itEPSS 0.26%Nov 10, 2025
- High8.8TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php.Check if you run itEPSS 0.45%Nov 10, 2025
- Critical9.1Soft Serve is a self-hostable Git server for the command line.Check if you run itEPSS 0.37%Nov 10, 2025
- High7.5The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs.Check if you run itEPSS 0.40%Nov 10, 2025
- Critical9.3Milvus is an open-source vector database built for generative AI applications.Check if you run itEPSS 0.87%Nov 10, 2025
- High8.6Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents.Check if you run itEPSS 0.33%Nov 10, 2025
- High8.6Incus is a system container and virtual machine manager.Check if you run itEPSS 0.18%Nov 10, 2025
Sort