Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services.Check if you run itEPSS 0.22%Mar 10, 2026
- High7.7Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly…Check if you run itEPSS 0.39%Mar 10, 2026
- Medium5.0Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log File…Check if you run itEPSS 0.24%Mar 10, 2026
- Medium5.8Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company.Check if you run itEPSS 0.27%Mar 10, 2026
- Medium5.9Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module.Check if you run itEPSS 0.23%Mar 10, 2026
- Critical9.1SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a…Check if you run itEPSS 0.57%Mar 10, 2026
- Medium6.4SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-con…Check if you run itEPSS 0.28%Mar 10, 2026
- Medium5.0SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application.Check if you run itEPSS 0.18%Mar 10, 2026
- Medium6.4SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints.Check if you run itEPSS 0.17%Mar 10, 2026
- Medium5.0SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system informa…Check if you run itEPSS 0.22%Mar 10, 2026
- Medium5.6The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms.Check if you run itEPSS 0.09%Mar 10, 2026
- Medium4.3Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sen…Check if you run itEPSS 0.20%Mar 10, 2026
- Medium6.4Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify…Check if you run itEPSS 0.21%Mar 10, 2026
- Medium6.1Due to insufficient validation of user-controlled input in the URLs query parameter.Check if you run itEPSS 0.23%Mar 10, 2026
- Medium4.4IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.Check if you run itEPSS 0.08%Mar 10, 2026
- Medium4.4ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.11%Mar 10, 2026
- Medium6.3ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.11%Mar 10, 2026
- Low2.3Misskey is an open source, federated social media platform.Check if you run itEPSS 0.24%Mar 10, 2026
- High7.1Misskey is an open source, federated social media platform.Check if you run itEPSS 0.16%Mar 10, 2026
- Critical9.2Misskey is an open source, federated social media platform.Check if you run itEPSS 0.26%Mar 10, 2026
- Medium6.0Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenti…Check if you run itEPSS 0.78%Mar 10, 2026
- UnknownPath Equivalence: 'filename....' (Multiple Trailing Dot)Patch nowKEVEPSS 2.66%Mar 10, 2026
- Critical9.1Budibase is a low code platform for creating internal tools, workflows, and admin panels.Patch nowKEVEPSS 15.66%Mar 9, 2026
- High8.1Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.27%Mar 9, 2026
- Critical9.8vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.57%Mar 9, 2026
Sort