Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-jsonCheck if you run itEPSS 0.49%Nov 11, 2025
- Medium6.5The Authors List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.6.1 via the via arbitrary method call from Authors_LCheck if you run itEPSS 0.41%Nov 11, 2025
- Medium6.4The Nonaki – Drag and Drop Email Template builder and Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nonaki' shortcode in all versions up to,Check if you run itEPSS 0.23%Nov 11, 2025
- Medium5.3The Crypto plugin for WordPress is vulnerable to unauthorized manipulation of data in all versions up to, and including, 2.22.Check if you run itEPSS 0.36%Nov 11, 2025
- Medium5.3The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log files.Check if you run itEPSS 0.33%Nov 11, 2025
- Medium5.1In TEE EcDSA algorithm, there is a possible memory consistency issue.Check if you run itEPSS 0.14%Nov 11, 2025
- High7.5SAP CommonCryptoLib does not perform necessary boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network.Check if you run itEPSS 0.45%Nov 11, 2025
- Medium6.1SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page controlled by the atCheck if you run itEPSS 0.22%Nov 11, 2025
- Medium5.3Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs.Check if you run itEPSS 0.50%Nov 11, 2025
- Medium4.3SAP S4CORE (Manage journal entries) does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges.Check if you run itEPSS 0.26%Nov 11, 2025
- Medium5.3Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unauthorized information.Check if you run itEPSS 0.25%Nov 11, 2025
- Medium6.9Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead toCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium6.8Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitraCheck if you run itEPSS 0.30%Nov 11, 2025
- Medium6.1Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attackeCheck if you run itEPSS 0.24%Nov 11, 2025
- Medium6.8Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafCheck if you run itEPSS 0.79%Nov 11, 2025
- Critical10.0SQL Anywhere Monitor (Non-GUI) baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitraryCheck if you run itEPSS 0.69%Nov 11, 2025
- Medium5.4SAP Starter Solution allows an authenticated attacker to execute crafted database queries, thereby exposing the back-end database.Check if you run itEPSS 0.20%Nov 11, 2025
- Medium5.5SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerabilityCheck if you run itEPSS 0.12%Nov 11, 2025
- Critical9.9Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module.Check if you run itEPSS 0.60%Nov 11, 2025
- Medium6.1Due to a Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could generate a malicious link and make it publicly accessible.Check if you run itEPSS 0.26%Nov 11, 2025
- Medium5.8Due to missing authentication, SAP HANA 2.0 (hdbrss) allows an unauthenticated attacker to call a remote-enabled function that will enable them to view information.Check if you run itEPSS 0.33%Nov 11, 2025
- Medium6.5SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an uniCheck if you run itEPSS 0.28%Nov 11, 2025
- Low2.7Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to theCheck if you run itEPSS 0.27%Nov 11, 2025
- Medium4.3Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with basic privileges could execute a specific function module in ABAPCheck if you run itEPSS 0.24%Nov 11, 2025
- High7.0Microsoft Windows Race Condition VulnerabilityPatch nowKEVEPSS 4.46%Nov 11, 2025
Sort