Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713.Check if you run itEPSS 1.40%Jun 10, 2025
- High8.7A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713.Check if you run itEPSS 1.03%Jun 10, 2025
- High8.7A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713.Check if you run itEPSS 6.39%Jun 10, 2025
- Medium6.9A vulnerability classified as critical has been found in code-projects Laundry System 1.0.Check if you run itEPSS 0.60%Jun 10, 2025
- Medium5.3The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages.Check if you run itEPSS 0.19%Jun 10, 2025
- Medium5.6SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modifyCheck if you run itEPSS 0.24%Jun 10, 2025
- High7.5SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail andCheck if you run itEPSS 0.41%Jun 10, 2025
- High7.5SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then faiCheck if you run itEPSS 0.43%Jun 10, 2025
- Medium6.7Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration could create an RFC deCheck if you run itEPSS 0.43%Jun 10, 2025
- Medium4.3SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks.Check if you run itEPSS 0.22%Jun 10, 2025
- Low3.0Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML code into a webpage, with the goal of redirecting users to the attacker controlledCheck if you run itEPSS 0.22%Jun 10, 2025
- Critical9.6RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.Check if you run itEPSS 0.44%Jun 10, 2025
- Low3.7Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crCheck if you run itEPSS 0.25%Jun 10, 2025
- Medium4.3SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter.Check if you run itEPSS 0.22%Jun 10, 2025
- Medium5.4SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user.Check if you run itEPSS 0.26%Jun 10, 2025
- High8.5SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the systemCheck if you run itEPSS 0.31%Jun 10, 2025
- High8.8SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials.Check if you run itEPSS 0.39%Jun 10, 2025
- High7.6SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user.Check if you run itEPSS 0.59%Jun 10, 2025
- Medium5.8Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through anCheck if you run itEPSS 0.31%Jun 10, 2025
- High8.2SAP BusinessObjects Business Intelligence (BI Workspace) allows an unauthenticated attacker to craft and store malicious script within a workspace.Check if you run itEPSS 0.37%Jun 10, 2025
- High8.7A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.Check this weekEPSS 11.55%Jun 10, 2025
- High8.7A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.Check this weekEPSS 11.28%Jun 10, 2025
- High7.2The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/workspace.jsp unrestricted file upload.Check if you run itEPSS 0.74%Jun 10, 2025
- High7.5Keyoti SearchUnit prior to 9.0.0.Check if you run itEPSS 0.39%Jun 10, 2025
- High8.8Microsoft Windows External Control of File Name or Path VulnerabilityPatch nowKEVEPSS 87.02%Jun 10, 2025
Sort