Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usage cpu-clock usage by the async-profiler tool can trigger a syCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium5.5Static Web Server (SWS) is a production-ready web server suitable for static web files or assets.Check if you run itEPSS 0.42%Dec 9, 2025
- Critical9.1WBCE CMS is a content management system.Check if you run itEPSS 0.52%Dec 9, 2025
- High7.2CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications.Check if you run itEPSS 0.67%Dec 9, 2025
- High8.4Wasmi is a WebAssembly interpreter focused on constrained and embedded systems.Check if you run itEPSS 0.15%Dec 9, 2025
- Medium6.0xmlseclibs is a library written in PHP for working with XML Encryption and Signatures.Check if you run itEPSS 0.24%Dec 9, 2025
- Critical9.1Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution.Check if you run itEPSS 9.48%Dec 9, 2025
- Medium6.5Due to an Information Disclosure vulnerability in Application Server ABAP, an authenticated attacker could read unmasked values displayed in ABAP Lists.Check if you run itEPSS 0.33%Dec 9, 2025
- Medium5.4SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error messagCheck if you run itEPSS 0.32%Dec 9, 2025
- Medium5.5Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and export the contents of database tables into an ABAP report.Check if you run itEPSS 0.31%Dec 9, 2025
- Critical9.9Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module.Check if you run itEPSS 4.50%Dec 9, 2025
- High8.2SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production.Check if you run itEPSS 0.36%Dec 9, 2025
- High7.5SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerabilCheck if you run itEPSS 0.54%Dec 9, 2025
- High7.1Due to a Missing Authorization Check vulnerability in SAP S/4 HANA Private Cloud (Financials General Ledger), an authenticated attacker with authorization limited to a single compaCheck if you run itEPSS 0.30%Dec 9, 2025
- Medium6.6The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, vCheck if you run itEPSS 0.34%Dec 9, 2025
- High7.9SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input valiCheck if you run itEPSS 0.47%Dec 9, 2025
- Medium5.9SAPUI5 (and OpenUI5) packages use outdated 3rd party libraries with known security vulnerabilities.Check if you run itEPSS 0.38%Dec 9, 2025
- Medium6.1Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of otheCheck if you run itEPSS 0.26%Dec 9, 2025
- Low1.3matrix-sdk-base is the base component to build a Matrix client library.Check if you run itEPSS 0.41%Dec 9, 2025
- Critical9.3The ruby-saml library implements the client side of an SAML authorization.Check if you run itEPSS 0.25%Dec 9, 2025
- Critical9.3The ruby-saml library is for implementing the client side of a SAML authorization.Check if you run itEPSS 0.42%Dec 9, 2025
- Critical9.3Fiber Utils is a collection of common functions created for Fiber.Check if you run itEPSS 0.47%Dec 9, 2025
- Medium6.51Panel is an open-source, web-based control panel for Linux server management.Check if you run itEPSS 0.25%Dec 9, 2025
- Medium6.9A vulnerability was determined in Tenda AC9 15.03.05.14_multi.Check if you run itEPSS 0.68%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: Reposition and add pcm_mutex If panic_on_warn is set and compress stream(DPCM) is started, tCheck if you run itEPSS 0.18%Dec 9, 2025
Sort