Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 co…Check if you run itEPSS 0.46%May 1, 2026
- Medium6.5An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embedded NUL bytes in t…Check if you run itEPSS 0.53%May 1, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and refault The splitting of a PUD entry in walk_pud…Check if you run itEPSS 0.11%Apr 22, 2026
- Medium6.5A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated…Check if you run itEPSS 0.32%Apr 20, 2026
- Critical9.3nanobot is a personal AI assistant.Check if you run itEPSS 0.20%Apr 14, 2026
- Medium6.5During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages.Check if you run itEPSS 0.39%Apr 14, 2026
- Medium4.3Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database ExplorerCheck if you run itEPSS 0.35%Apr 14, 2026
- Medium6.5Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote functi…Check if you run itEPSS 0.35%Apr 14, 2026
- Medium6.1Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a victim, th…Check if you run itEPSS 0.26%Apr 14, 2026
- High7.1Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Premise), an authenticated attacker could execute a particular ABAP report to ove…Check if you run itEPSS 0.34%Apr 14, 2026
- Medium4.1SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs.Check if you run itEPSS 0.28%Apr 14, 2026
- Critical9.9Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statement…Check if you run itEPSS 0.55%Apr 14, 2026
- Medium6.5Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exp…Check if you run itEPSS 0.31%Apr 14, 2026
- Medium6.5Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker could update and delete child entities via expo…Check if you run itEPSS 0.31%Apr 14, 2026
- Medium6.5Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Reference Equipment), an attacker could update and delete child entities via OData service…Check if you run itEPSS 0.31%Apr 14, 2026
- Medium4.3Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Object Structures), an attacker could update and delete child entities via expos…Check if you run itEPSS 0.26%Apr 14, 2026
- Low2.0SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and…Check if you run itEPSS 0.24%Apr 14, 2026
- Medium6.1Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that is interp…Check if you run itEPSS 0.29%Apr 14, 2026
- Medium4.9Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthor…Check if you run itEPSS 0.25%Apr 14, 2026
- Medium4.2Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session toke…Check if you run itEPSS 0.17%Apr 14, 2026
- Medium6.1Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a…Check if you run itEPSS 0.23%Apr 14, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elfsight Elfsight WhatsApp Chat CC elfsight-whatsapp-chat allows…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium6.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.42%Apr 3, 2026
- Medium6.5Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.48%Apr 2, 2026
- Critical9.1OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.50%Apr 2, 2026