Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, th…Check if you run itEPSS 0.15%Apr 14, 2026
- High7.1Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Premise), an authenticated attacker could execute a particular ABAP report to ove…Check if you run itEPSS 0.22%Apr 14, 2026
- Medium5.5MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.24%Apr 14, 2026
- Medium5.3nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Check if you run itEPSS 0.30%Apr 14, 2026
- Low2.9jq is a command-line JSON processor.Check if you run itEPSS 0.26%Apr 14, 2026
- Medium4.1SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs.Check if you run itEPSS 0.18%Apr 14, 2026
- Critical9.9Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statement…Check if you run itEPSS 0.50%Apr 14, 2026
- Medium6.5Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exp…Check if you run itEPSS 0.18%Apr 14, 2026
- Medium6.5Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker could update and delete child entities via expo…Check if you run itEPSS 0.18%Apr 14, 2026
- Medium6.5Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Reference Equipment), an attacker could update and delete child entities via OData service…Check if you run itEPSS 0.18%Apr 14, 2026
- Medium4.3Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Object Structures), an attacker could update and delete child entities via expos…Check if you run itEPSS 0.16%Apr 14, 2026
- Low2.0SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and…Check if you run itEPSS 0.17%Apr 14, 2026
- Medium6.1Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that is interp…Check if you run itEPSS 0.19%Apr 14, 2026
- Medium4.9Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthor…Check if you run itEPSS 0.16%Apr 14, 2026
- Medium4.3The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting in the disclosure of sensitive information.Check if you run itEPSS 0.17%Apr 14, 2026
- Medium4.2Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session toke…Check if you run itEPSS 0.17%Apr 14, 2026
- Medium6.1Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a…Check if you run itEPSS 0.23%Apr 14, 2026
- Medium4.3Microsoft Windows Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 70.90%Apr 14, 2026
- Medium6.1The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4.Check if you run itEPSS 0.66%Apr 13, 2026
- High7.5Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks.Check if you run itEPSS 0.40%Apr 13, 2026
- Medium6.1jq is a command-line JSON processor.Check if you run itEPSS 0.17%Apr 13, 2026
- Low2.0A vulnerability was identified in HummerRisk up to 1.5.0.Check if you run itEPSS 0.22%Apr 13, 2026
- High7.0Mitgation of CVE-2026-4519 was incomplete.Check if you run itEPSS 0.29%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.18%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.19%Apr 13, 2026
Sort