Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4SummaryThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint.Check this weekEPSS 24.00%May 28, 2025
- Critical9.4aws-mcp-server MCP server is vulnerable to command injection.Check if you run itEPSS 1.22%May 28, 2025
- Medium6.9A vulnerability was found in SourceCodester Client Database Management System 1.0.Check this weekEPSS 63.00%May 28, 2025
- High7.8LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability.Check if you run itEPSS 1.08%May 28, 2025
- Medium4.8A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0Check if you run itEPSS 0.55%May 28, 2025
- High7.4An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local attacker to escalate privilegCheck if you run itEPSS 0.19%May 28, 2025
- Unknownsmarsh telemessage Use of Password Hash Instead of Password for AuthenticationPatch nowKEVEPSS 0.26%May 28, 2025
- Medium5.4A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page.Check if you run itEPSS 0.27%May 27, 2025
- Medium5.1A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0.Check this weekEPSS 42.00%May 26, 2025
- High8.7Insecure Direct Object Reference (IDOR) vulnerability in Clickedu.Check this weekEPSS 36.00%May 26, 2025
- High8.7A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical.Check this weekEPSS 88.00%May 25, 2025
- Medium4.8A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd.Check this weekEPSS 20.00%May 25, 2025
- Medium5.3A vulnerability classified as critical has been found in Seeyon Zhiyuan OA Web Application System up to 8.1 SP2.Check this weekEPSS 36.00%May 25, 2025
- Medium6.1The 4stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9.Check if you run itEPSS 0.30%May 24, 2025
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.30%May 23, 2025
- Medium5.5zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification.Check this weekEPSS 17.00%May 22, 2025
- Medium6.6Schule is open-source school management system software.Check this weekEPSS 38.00%May 22, 2025
- Medium5.8An improper authentication vulnerability exists in WSO2 Identity Server 7.0.0 due to an implementation flaw that allows app-native authentication to be bypassed when an invalid objCheck if you run itEPSS 0.33%May 22, 2025
- Medium6.0wire-webapp is the web application for the open-source messaging service Wire.Check this weekEPSS 10.00%May 22, 2025
- Medium4.8Asterisk is an open-source private branch exchange (PBX).Check if you run itEPSS 0.26%May 22, 2025
- High7.1IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-sidCheck if you run itEPSS 0.36%May 22, 2025
- Critical9.8An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.Check if you run itEPSS 0.59%May 22, 2025
- Medium4.3Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internCheck if you run itEPSS 0.24%May 21, 2025
- Medium4.3A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service.Check if you run itEPSS 0.19%May 21, 2025
- High8.2Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.Check if you run itEPSS 0.90%May 21, 2025