Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check.Check if you run itEPSS 0.31%May 13, 2025
- High7.9Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality withCheck if you run itEPSS 0.16%May 13, 2025
- Medium6.6Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application.Check if you run itEPSS 0.28%May 13, 2025
- Medium6.2SAP NetWeaver is vulnerable to an Information Disclosure vulnerability caused by the injection of malicious instructions into user configuration settings.Check if you run itEPSS 0.36%May 13, 2025
- High8.6The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an application servlet request with a crafted XML file which wheCheck if you run itEPSS 0.42%May 13, 2025
- Critical10.0The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload rCheck if you run itEPSS 0.83%May 13, 2025
- Medium5.3The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attaCheck if you run itEPSS 0.37%May 13, 2025
- Medium6.1The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attaCheck if you run itEPSS 0.29%May 13, 2025
- Medium6.1he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacCheck if you run itEPSS 0.30%May 13, 2025
- Medium4.4The Data Services Management Console does not sufficiently encode user-controlled inputs, allowing an attacker to inject malicious script.Check this weekEPSS 21.00%May 13, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in dev_uevent() If userspace reads "uevent" device attributeCheck if you run itEPSS 0.21%May 8, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways giveasap allows Cross Site Request Forgery.This issue affects Simple Giveaways: from n/a through <= 2Check if you run itEPSS 0.17%May 7, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.74%Apr 27, 2025
- Medium6.5A flaw was found in libsoup.Check if you run itEPSS 0.58%Apr 24, 2025
- Medium4.6SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to the server.Check if you run itEPSS 0.14%Apr 22, 2025
- Medium4.3SAP Field Logistics Manage Logistics application OData meta-data property is vulnerable to data tampering, due to which certain fields could be externally modified by an attacker cCheck if you run itEPSS 0.27%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- UnknownSAP NetWeaver Deserialization of Untrusted DataPatch nowKEVEPSS 5.37%Apr 22, 2025
- High7.3BleachBit cleans files to free disk space and to maintain privacy.Check if you run itEPSS 0.24%Apr 15, 2025
- Medium5.9A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design.Check if you run itEPSS 0.35%Apr 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: llc: do not use skb_get() before dev_queue_xmit() syzbot is able to crash hosts [1], using llc and…Check if you run itEPSS 0.22%Apr 1, 2025
- UnknownWhatsApp PDF Content Sandbox BypassPatch nowKEVEPSS 0.26%Mar 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv4: use RCU protection in __ip_rt_update_pmtu() __ip_rt_update_pmtu() must use RCU protection to…Check if you run itEPSS 0.57%Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protection to make…Check if you run itEPSS 0.61%Feb 27, 2025
- Unknownavertx hd838_firmware Observable DiscrepancyPatch nowKEVEPSS 1.38%Jul 16, 2024