Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.Check if you run itEPSS 0.15%May 12, 2026
- Medium6.1SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker…Check if you run itEPSS 0.21%May 12, 2026
- Medium4.3SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminating their sessions temporarily preventing access.Check if you run itEPSS 0.29%May 12, 2026
- Medium6.5An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated attacker with administrati…Check if you run itEPSS 1.40%May 12, 2026
- Medium4.3Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users could invoke a remote-enabled function module…Check if you run itEPSS 0.20%May 12, 2026
- Medium6.3Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table re…Check if you run itEPSS 0.22%May 12, 2026
- Medium5.4Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in Business Server Pages), an authenticated attacker could access informati…Check if you run itEPSS 0.19%May 12, 2026
- Low3.4SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically constructed using user input without proper parameterization or prepar…Check if you run itEPSS 0.17%May 12, 2026
- Medium4.3Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticated attacker could send specially crafted inputs…Check if you run itEPSS 0.26%May 12, 2026
- Critical9.6Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-si…Check if you run itEPSS 0.61%May 12, 2026
- Critical9.6SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacker to inject malicious SQL statements through us…Check if you run itEPSS 0.47%May 12, 2026
- High8.2Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with administrative authorizations could abuse a non-remote-…Check if you run itEPSS 0.20%May 12, 2026
- Medium4.7SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content.Check if you run itEPSS 0.25%May 12, 2026
- Medium6.1Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages), an unauthenticated…Check if you run itEPSS 0.22%May 12, 2026
- Medium5.4Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended req…Check if you run itEPSS 0.12%May 12, 2026
- High8.5A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM.Check if you run itEPSS 0.22%May 12, 2026
- Critical9.8Vaultwarden is a Bitwarden-compatible server written in Rust.Check if you run itEPSS 0.29%May 11, 2026
- High8.1Vaultwarden is a Bitwarden-compatible server written in Rust.Check if you run itEPSS 0.27%May 11, 2026
- High8.7Vaultwarden is a Bitwarden-compatible server written in Rust.Check if you run itEPSS 0.29%May 11, 2026
- High8.1Vaultwarden is a Bitwarden-compatible server written in Rust.Check if you run itEPSS 0.22%May 11, 2026
- Critical9.3DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents.Check if you run itEPSS 0.31%May 11, 2026
- Critical9.6DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents.Check if you run itEPSS 0.33%May 11, 2026
- High8.6barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size…Check if you run itEPSS 0.15%May 11, 2026
- Medium6.9barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir() functio…Check if you run itEPSS 0.13%May 11, 2026
- Low2.1A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210.Check if you run itEPSS 3.47%May 11, 2026
Sort