Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials.Check if you run itEPSS 0.18%May 13, 2025
- Medium5.3Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards (PODs) that enable outside users to access customer data when they access theCheck if you run itEPSS 0.36%May 13, 2025
- Medium6.4SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field.Check if you run itEPSS 0.33%May 13, 2025
- Medium4.3SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check.Check if you run itEPSS 0.31%May 13, 2025
- High7.9Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality withCheck if you run itEPSS 0.16%May 13, 2025
- Medium6.6Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application.Check if you run itEPSS 0.28%May 13, 2025
- Medium6.2SAP NetWeaver is vulnerable to an Information Disclosure vulnerability caused by the injection of malicious instructions into user configuration settings.Check if you run itEPSS 0.36%May 13, 2025
- High8.6The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an application servlet request with a crafted XML file which wheCheck if you run itEPSS 0.42%May 13, 2025
- Critical10.0The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload rCheck if you run itEPSS 0.83%May 13, 2025
- Medium5.3The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attaCheck if you run itEPSS 0.37%May 13, 2025
- Medium6.1The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attaCheck if you run itEPSS 0.29%May 13, 2025
- Medium6.1he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacCheck if you run itEPSS 0.30%May 13, 2025
- Medium4.4The Data Services Management Console does not sufficiently encode user-controlled inputs, allowing an attacker to inject malicious script.Check if you run itEPSS 0.21%May 13, 2025
- Medium5.4TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface.Check if you run itEPSS 5.06%May 13, 2025
- Medium5.4TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface.Check if you run itEPSS 0.36%May 13, 2025
- Critical9.8TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.Check if you run itEPSS 0.63%May 13, 2025
- Medium5.4TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface.Check if you run itEPSS 5.06%May 13, 2025
- Critical9.8TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.Check if you run itEPSS 0.63%May 13, 2025
- Critical9.8TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.Check if you run itEPSS 0.63%May 13, 2025
- Medium5.4TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface.Check if you run itEPSS 5.21%May 13, 2025
- Critical9.8TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.Check this weekEPSS 11.07%May 13, 2025
- Critical9.8EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function.Check if you run itEPSS 1.08%May 13, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 88.00%May 13, 2025
- High7.5Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.93%May 13, 2025
- Medium5.1CP-XR-DE21-S -4G Router Firmware version 1.031.022 was discovered to contain insecure protections for its UART console.Check if you run itEPSS 0.22%May 13, 2025
Sort