Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and…Check if you run itEPSS 0.17%Apr 14, 2026
- Medium6.1Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that is interp…Check if you run itEPSS 0.19%Apr 14, 2026
- Medium4.9Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthor…Check if you run itEPSS 0.16%Apr 14, 2026
- Medium4.3The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting in the disclosure of sensitive information.Check if you run itEPSS 0.17%Apr 14, 2026
- Medium4.2Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session toke…Check if you run itEPSS 0.17%Apr 14, 2026
- Medium6.1Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a…Check if you run itEPSS 0.23%Apr 14, 2026
- Medium4.3Microsoft Windows Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 70.90%Apr 14, 2026
- Medium6.1The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4.Check if you run itEPSS 0.66%Apr 13, 2026
- High7.5Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks.Check if you run itEPSS 0.40%Apr 13, 2026
- Medium6.9jq is a command-line JSON processor.Check if you run itEPSS 0.56%Apr 13, 2026
- Medium6.1jq is a command-line JSON processor.Check if you run itEPSS 0.17%Apr 13, 2026
- Medium5.5A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23.Check if you run itEPSS 0.30%Apr 13, 2026
- Low2.0A vulnerability was identified in HummerRisk up to 1.5.0.Check if you run itEPSS 0.22%Apr 13, 2026
- High7.0Mitgation of CVE-2026-4519 was incomplete.Check if you run itEPSS 0.29%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.18%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.18%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.19%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.19%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.18%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.21%Apr 13, 2026
- Medium5.5jq is a command-line JSON processor.Check if you run itEPSS 0.23%Apr 13, 2026
- High7.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.51%Apr 13, 2026
- High7.1ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.19%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.14%Apr 13, 2026
- High7.5An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials.Check if you run itEPSS 0.36%Apr 13, 2026
Sort