Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)…Check if you run itEPSS 0.11%May 12, 2026
- High8.8** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attac…Check if you run itEPSS 1.01%May 12, 2026
- Medium6.5** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware…Check if you run itEPSS 0.20%May 12, 2026
- High7.1The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.Check if you run itEPSS 0.15%May 12, 2026
- Medium6.1SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker…Check if you run itEPSS 0.21%May 12, 2026
- Medium4.3SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminating their sessions temporarily preventing access.Check if you run itEPSS 0.29%May 12, 2026
- Medium6.5An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated attacker with administrati…Check if you run itEPSS 1.40%May 12, 2026
- Medium4.3Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users could invoke a remote-enabled function module…Check if you run itEPSS 0.20%May 12, 2026
- Medium6.3Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table re…Check if you run itEPSS 0.22%May 12, 2026
- Medium5.4Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in Business Server Pages), an authenticated attacker could access informati…Check if you run itEPSS 0.19%May 12, 2026
- Low3.4SQL injection vulnerability exists in @sap/hdi-deploy package, where SQL queries are dynamically constructed using user input without proper parameterization or prepar…Check if you run itEPSS 0.17%May 12, 2026
- Medium4.3Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticated attacker could send specially crafted inputs…Check if you run itEPSS 0.26%May 12, 2026
- Critical9.6Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-si…Check if you run itEPSS 0.61%May 12, 2026
- Critical9.6SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacker to inject malicious SQL statements through us…Check if you run itEPSS 0.47%May 12, 2026
- High8.2Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with administrative authorizations could abuse a non-remote-…Check if you run itEPSS 0.20%May 12, 2026
- Medium4.7SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content.Check if you run itEPSS 0.25%May 12, 2026
- Medium6.1Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages), an unauthenticated…Check if you run itEPSS 0.22%May 12, 2026
- Medium5.4Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended req…Check if you run itEPSS 0.12%May 12, 2026
- High8.5A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM.Check if you run itEPSS 0.22%May 12, 2026
- High8.4DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated user who…Check if you run itEPSS 0.28%May 12, 2026
- High8.5A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the context o…Check if you run itEPSS 0.89%May 12, 2026
- Low3.2Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.Check if you run itEPSS 0.10%May 12, 2026
- Low2.1A flaw has been found in omec-project amf up to 2.1.1.Check if you run itEPSS 0.31%May 12, 2026
- Low2.1A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210.Check if you run itEPSS 3.40%May 12, 2026
- Low2.1A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210.Check if you run itEPSS 3.47%May 11, 2026
Sort