Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability has been identified in SiPass integrated (All versions < V3.0).Check if you run itEPSS 0.20%Oct 14, 2025
- Critical9.3A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIMCheck if you run itEPSS 0.53%Oct 14, 2025
- Critical9.3A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3).Check if you run itEPSS 0.53%Oct 14, 2025
- High8.3A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl.Check if you run itEPSS 0.31%Oct 14, 2025
- High8.7A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl.Check if you run itEPSS 0.47%Oct 14, 2025
- Medium5.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check.Check if you run itEPSS 0.14%Oct 14, 2025
- Medium5.5In gnss driver, there is a possible out of bounds read due to an integer overflow.Check if you run itEPSS 0.09%Oct 14, 2025
- Critical9.8ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability.Check if you run itEPSS 0.80%Oct 14, 2025
- High8.8An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total lossCheck if you run itEPSS 0.85%Oct 14, 2025
- High7.5A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI.Check if you run itEPSS 0.24%Oct 14, 2025
- Medium5.3The websocket handler is vulnerable to a denial of service condition.Check if you run itEPSS 1.41%Oct 14, 2025
- Medium5.3The webserver is vulnerable to a denial of service condition.Check if you run itEPSS 1.67%Oct 14, 2025
- Medium6.8An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.Check if you run itEPSS 0.46%Oct 14, 2025
- Medium5.3An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality.Check if you run itEPSS 1.59%Oct 14, 2025
- High7.5An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.Check if you run itEPSS 1.05%Oct 14, 2025
- Medium5.7In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region.Check if you run itEPSS 0.17%Oct 14, 2025
- Low3.1A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT elements during stylesheet parsing.Check if you run itEPSS 0.28%Oct 14, 2025
- Low3.8The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRFCheck if you run itEPSS 0.23%Oct 14, 2025
- Medium6.1The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributoCheck if you run itEPSS 0.19%Oct 14, 2025
- Medium4.3The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.12.1.Check if you run itEPSS 0.25%Oct 14, 2025
- Medium4.3SAP S/4HANA (Manage Processing Rules - For Bank Statements) allows an authenticated attacker with basic privileges to delete conditions from any shared rule of any user by tamperinCheck if you run itEPSS 0.23%Oct 14, 2025
- Low3.0SAP Cloud Appliance Library Appliances allows an attacker with high privileges to leverage an insecure S/4HANA default profile setting in an existing SAP CAL appliances to gain accCheck if you run itEPSS 0.24%Oct 14, 2025
- Medium5.4Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the sessioCheck if you run itEPSS 0.16%Oct 14, 2025
- Medium5.3SAP Commerce Cloud contains a path traversal vulnerability that may allow users to access web applications such as the Administration Console from addresses where the AdministratioCheck if you run itEPSS 0.43%Oct 14, 2025
- Medium4.3A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through respCheck if you run itEPSS 0.34%Oct 14, 2025
Sort