Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClCheck if you run itEPSS 0.38%Jun 10, 2025
- Medium4.6An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted uCheck if you run itEPSS 0.33%Jun 10, 2025
- Medium4.4A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacCheck if you run itEPSS 0.17%Jun 10, 2025
- Medium4.9matrix-rust-sdk is an implementation of a Matrix client-server library in Rust.Check if you run itEPSS 0.37%Jun 10, 2025
- Critical9.9geotools geotools Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 42.29%Jun 10, 2025
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityPatch nowKEVEPSS 82.70%Jun 10, 2025
- High7.5Apache kafka Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 68.78%Jun 10, 2025
- High8.8A possible security vulnerability has been identified in Apache Kafka.Check if you run itEPSS 1.07%Jun 10, 2025
- Medium4.3The Bunny’s Print CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.95.Check if you run itEPSS 0.15%Jun 10, 2025
- High8.7A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713.Check if you run itEPSS 1.40%Jun 10, 2025
- Medium5.6SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modifyCheck if you run itEPSS 0.24%Jun 10, 2025
- Medium5.8Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through anCheck if you run itEPSS 0.31%Jun 10, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- Medium5.3HAX CMS PHP allows users to manage their microsite universe with a PHP backend.Check if you run itEPSS 0.37%Jun 9, 2025
- Medium5.3A vulnerability was found in vuejs vue-cli up to 5.0.8.Check if you run itEPSS 0.62%Jun 9, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in click5 History Log by click5 history-log-by-click5 allows Stored XSS.This issuCheck if you run itEPSS 0.25%Jun 9, 2025
- High8.1Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a through <= 2.1.Check if you run itEPSS 0.60%Jun 9, 2025
- Medium6.5There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks.Check if you run itEPSS 0.46%Jun 9, 2025
- Medium6.5A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request.Check if you run itEPSS 0.49%Jun 9, 2025
- UnknownLaravel Laravel Framework Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 44.76%Jun 8, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0.Check if you run itEPSS 0.46%Jun 7, 2025
- UnknownVmware vSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVJun 7, 2025
- Unknownteclib-edition gestionnaire_libre_de_parc_informatique Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 22.37%Jun 7, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 6.19%Jun 6, 2025
- Medium4.9A flaw was found in Samba.Check if you run itEPSS 0.75%Jun 6, 2025