Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the systemCheck if you run itEPSS 0.31%Jun 10, 2025
- High8.8SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials.Check if you run itEPSS 0.39%Jun 10, 2025
- High7.6SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user.Check if you run itEPSS 0.59%Jun 10, 2025
- Medium5.8Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through anCheck if you run itEPSS 0.31%Jun 10, 2025
- High8.2SAP BusinessObjects Business Intelligence (BI Workspace) allows an unauthenticated attacker to craft and store malicious script within a workspace.Check if you run itEPSS 0.37%Jun 10, 2025
- High8.7A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.Check this weekEPSS 11.55%Jun 10, 2025
- High8.7A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.Check this weekEPSS 11.28%Jun 10, 2025
- High7.2The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/workspace.jsp unrestricted file upload.Check if you run itEPSS 0.74%Jun 10, 2025
- High7.5Keyoti SearchUnit prior to 9.0.0.Check if you run itEPSS 0.39%Jun 10, 2025
- High8.8Microsoft Windows External Control of File Name or Path VulnerabilityPatch nowKEVEPSS 87.02%Jun 10, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- Critical9.8Erxes <1.6.1 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.63%Jun 10, 2025
- Medium6.1Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the "Pessoas" (persons) section via the field "Profisso" (professor).Check if you run itEPSS 0.26%Jun 10, 2025
- Medium6.1Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.26%Jun 10, 2025
- Medium6.1Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the field "Ttulo" (title) inside the filter Save option in the "Busca" (search) function.Check if you run itEPSS 0.26%Jun 10, 2025
- Medium6.1Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) via the form field "Observaces" (observances) in the "Pessoas" (persons) section when creatingCheck if you run itEPSS 0.26%Jun 10, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a crafteCheck if you run itEPSS 0.42%Jun 10, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a cCheck if you run itEPSS 0.43%Jun 10, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a craftCheck if you run itEPSS 0.51%Jun 10, 2025
- UnknownMicrosoft Windows Use After FreePatch nowKEVEPSS 16.26%Jun 10, 2025
- Unknowncodepress visitor_statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.23%Jun 10, 2025
- Unknownwindriver vxworks Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Patch nowKEVEPSS 3.16%Jun 10, 2025
- Unknownwindriver vxworks Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 75.25%Jun 10, 2025
- Medium6.6In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaCheck if you run itEPSS 0.17%Jun 9, 2025
- High8.7A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.Check this weekEPSS 11.28%Jun 9, 2025
Sort