Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.24%May 12, 2026
- High7.5The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4.17 due to insufficient escaping…Check if you run itEPSS 0.41%May 12, 2026
- Medium6.4The BJ Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the function in all versions up to, and including, 1.0.9.Check if you run itEPSS 0.19%May 12, 2026
- High8.2An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is succe…Check if you run itEPSS 0.35%May 12, 2026
- Medium6.1Issuing an ICMP ping via the shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue…Check if you run itEPSS 0.14%May 12, 2026
- High8.8A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation.Check if you run itEPSS 0.23%May 12, 2026
- High7.3An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation.Check if you run itEPSS 0.13%May 12, 2026
- High7.3An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation.Check if you run itEPSS 0.40%May 12, 2026
- High7.3ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation.Check if you run itEPSS 0.10%May 12, 2026
- Critical9.1"Kura Sushi Official App" provided by EPG, Inc.Check if you run itEPSS 0.16%May 12, 2026
- Medium4.6The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability.Check if you run itEPSS 0.15%May 12, 2026
- High7.5** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions of th…Check if you run itEPSS 0.31%May 12, 2026
- Medium4.4** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)…Check if you run itEPSS 0.11%May 12, 2026
- High8.8** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attac…Check if you run itEPSS 1.01%May 12, 2026
- Medium6.5** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware…Check if you run itEPSS 0.20%May 12, 2026
- High7.1The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.Check if you run itEPSS 0.15%May 12, 2026
- Medium6.1SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker…Check if you run itEPSS 0.21%May 12, 2026
- Medium4.3SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminating their sessions temporarily preventing access.Check if you run itEPSS 0.29%May 12, 2026
- Medium6.5An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated attacker with administrati…Check if you run itEPSS 1.40%May 12, 2026
- Medium4.3Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users could invoke a remote-enabled function module…Check if you run itEPSS 0.20%May 12, 2026
- Medium6.3Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table re…Check if you run itEPSS 0.22%May 12, 2026
- Medium5.4Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in Business Server Pages), an authenticated attacker could access informati…Check if you run itEPSS 0.19%May 12, 2026
- Low3.4SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically constructed using user input without proper parameterization or prepar…Check if you run itEPSS 0.17%May 12, 2026
- Medium4.3Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticated attacker could send specially crafted inputs…Check if you run itEPSS 0.26%May 12, 2026
- Critical9.6Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-si…Check if you run itEPSS 0.61%May 12, 2026
Sort