Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Due to directory traversal vulnerability in SAP S/4HANA (Bank Communication Management), an attacker with high privileges and access to a specific transaction and method in Bank CoCheck if you run itEPSS 0.95%Aug 12, 2025
- Medium6.1SAP NetWeaver Application Server ABAP has HTML injection vulnerability.Check if you run itEPSS 0.21%Aug 12, 2025
- Medium4.5SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths.Check if you run itEPSS 0.32%Aug 12, 2025
- Medium6.1SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability.Check if you run itEPSS 0.23%Aug 12, 2025
- Low3.5SAP Fiori (Launchpad) is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link ( ) elements.Check if you run itEPSS 0.21%Aug 12, 2025
- Medium5.4The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated userCheck if you run itEPSS 0.20%Aug 12, 2025
- Medium4.1The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to reaCheck if you run itEPSS 0.13%Aug 12, 2025
- Medium4.3SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection.Check if you run itEPSS 0.26%Aug 12, 2025
- UnknownAdobe experience_manager_forms Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 70.11%Aug 12, 2025
- Critical9.8Fortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 65.30%Aug 12, 2025
- UnknownApache Superset Improper Input ValidationPatch nowKEVEPSS 86.03%Aug 12, 2025
- UnknownApache Superset Deserialization of Untrusted DataPatch nowKEVEPSS 35.45%Aug 12, 2025
- Medium5.1slab is a pre-allocated storage for a uniform data type.Check if you run itEPSS 0.18%Aug 11, 2025
- Medium6.9Vim is an open source, command line text editor.Check if you run itEPSS 0.36%Aug 11, 2025
- Medium6.9Vim is an open source, command line text editor.Check if you run itEPSS 0.36%Aug 11, 2025
- High8.6stirlingpdf stirling_pdf Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.07%Aug 11, 2025
- High7.8pyLoad is the free and open-source Download Manager written in pure Python.Check if you run itEPSS 0.34%Aug 11, 2025
- High8.6Stirling-PDF is a locally hosted web application that performs various operations on PDF files.Check if you run itEPSS 1.69%Aug 11, 2025
- High8.6Stirling-PDF is a locally hosted web application that performs various operations on PDF files.Check if you run itEPSS 0.37%Aug 11, 2025
- High8.6Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network trafCheck if you run itEPSS 0.30%Aug 11, 2025
- Medium6.9OpenKilda is an open-source OpenFlow controller.Check if you run itEPSS 0.42%Aug 11, 2025
- High8.5Zed is a multiplayer code editor.Check if you run itEPSS 0.21%Aug 11, 2025
- High8.6CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft runningCheck if you run itEPSS 0.39%Aug 11, 2025
- Medium4.0Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel subscription without proper access to theCheck if you run itEPSS 0.20%Aug 11, 2025
- High7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoCheck if you run itEPSS 0.34%Aug 11, 2025
Sort