Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems (OS).Check if you run itEPSS 0.30%May 13, 2025
- Medium6.0nosurf is cross-site request forgery (CSRF) protection middleware for Go.Check if you run itEPSS 0.24%May 13, 2025
- Critical9.8An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gaiCheck if you run itEPSS 2.13%May 13, 2025
- High7.5APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means.Check if you run itEPSS 0.13%May 13, 2025
- Medium4.9Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation.Check if you run itEPSS 0.37%May 13, 2025
- High8.7A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1).Check if you run itEPSS 0.46%May 13, 2025
- Medium5.3A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions).Check if you run itEPSS 0.22%May 13, 2025
- High8.7A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versionCheck if you run itEPSS 0.65%May 13, 2025
- High8.7A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versionCheck if you run itEPSS 0.65%May 13, 2025
- High8.7A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versionCheck if you run itEPSS 0.65%May 13, 2025
- High8.2A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Check if you run itEPSS 0.43%May 13, 2025
- High8.7A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Check if you run itEPSS 0.30%May 13, 2025
- Medium6.9A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2).Check if you run itEPSS 0.48%May 13, 2025
- High7.1A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Check if you run itEPSS 0.55%May 13, 2025
- High8.7A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), DeCheck if you run itEPSS 0.57%May 13, 2025
- Critical9.3SQL injection vulnerability in DomainsPRO 1.2.Check if you run itEPSS 0.36%May 13, 2025
- Critical9.4The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the databaseCheck if you run itEPSS 0.50%May 13, 2025
- High8.8The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7.Check if you run itEPSS 0.47%May 13, 2025
- High8.2VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%May 13, 2025
- High7.7Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted funCheck if you run itEPSS 0.36%May 13, 2025
- High8.3SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP standard authorization to execute a certain function moduleCheck if you run itEPSS 0.47%May 13, 2025
- Medium6.3SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges.Check if you run itEPSS 0.26%May 13, 2025
- Medium5.8Due to missing authorization check, an unauthorized user can view the files of other company.Check if you run itEPSS 0.36%May 13, 2025
- Medium6.3SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges.Check if you run itEPSS 0.26%May 13, 2025
- Medium6.1SAP Supplier Relationship Management (Master Data Management Catalogue) allows an unauthenticated attacker to execute malicious scripts in the application, potentially leading to aCheck if you run itEPSS 0.29%May 13, 2025
Sort