Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.35%Mar 7, 2026
- Medium6.9Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.35%Mar 7, 2026
- High8.8Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.56%Mar 7, 2026
- Medium5.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.39%Mar 7, 2026
- High8.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.53%Mar 7, 2026
- Medium4.3Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted.Check if you run itEPSS 0.21%Feb 24, 2026
- Low2.1A vulnerability was identified in SapneshNaik Student Management System up to f4b4f0928f0b5551a28ee81ae7e7fe47d9345318.Check if you run itEPSS 0.48%Feb 22, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.44%Feb 21, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itex iSape isape allows Reflected XSS.This issue affects iSape: f…Check if you run itEPSS 0.19%Feb 20, 2026
- UnknownSAP Solution Manager URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.20%Jan 14, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() When peer delete failed i…Check if you run itEPSS 0.32%Dec 30, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_deal_update in…Check if you run itEPSS 3.05%Dec 11, 2025
- Low2.7The Nextcloud Approval app allows approval or disapproval of files in the sidebar.Check if you run itEPSS 0.31%Dec 5, 2025
- Unknownprocess: command injection via argument list on WindowsCheck if you run itEPSS 6.83%Nov 14, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.65%Sep 4, 2025
- Medium5.4Meta Platforms WhatsApp Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.73%Aug 20, 2025
- High7.8A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.Check if you run itEPSS 0.44%Jul 10, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Sapa sapa allows PHP Local File Inclusion.This issuCheck this weekEPSS 58.00%Jun 17, 2025
- Critical9.1A privilege escalation from host to domain vulnerability was found in the FreeIPA project.Check if you run itEPSS 1.99%Jun 17, 2025
- Medium5.3The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages.Check if you run itEPSS 0.19%Jun 10, 2025
- Medium5.6SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modifyCheck if you run itEPSS 0.24%Jun 10, 2025
- High7.5SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail andCheck if you run itEPSS 0.41%Jun 10, 2025
- High7.5SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then faiCheck if you run itEPSS 0.43%Jun 10, 2025
- Medium6.7Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration could create an RFC deCheck if you run itEPSS 0.43%Jun 10, 2025
- Medium4.3SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks.Check if you run itEPSS 0.22%Jun 10, 2025