Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Horilla is a free and open source Human Resource Management System (HRMS).Check if you run itEPSS 0.23%May 15, 2025
- Low1.9Emlog is an open source website building system.Check if you run itEPSS 0.27%May 15, 2025
- Low3.1Undici is an HTTP/1.1 client for Node.js.Check if you run itEPSS 0.34%May 15, 2025
- Low1.2A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScrCheck this weekEPSS 46.30%May 14, 2025
- Critical9.75ire is a cross-platform desktop artificial intelligence assistant and model context protocol client.Check if you run itEPSS 1.01%May 14, 2025
- Low2.3Umbraco Forms is a form builder that integrates with the Umbraco content management system.Check if you run itEPSS 0.30%May 13, 2025
- Medium5.0A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthenticated attacker to pCheck if you run itEPSS 0.60%May 13, 2025
- Low2.3An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3Check if you run itEPSS 0.14%May 13, 2025
- Medium6.7A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).Check if you run itEPSS 0.11%May 13, 2025
- High8.5A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).Check if you run itEPSS 0.19%May 13, 2025
- High8.4A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).Check if you run itEPSS 0.16%May 13, 2025
- High8.7A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), DeCheck if you run itEPSS 0.57%May 13, 2025
- High8.2VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%May 13, 2025
- Medium6.6Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application.Check if you run itEPSS 0.28%May 13, 2025
- Medium6.1The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attaCheck if you run itEPSS 0.29%May 13, 2025
- Medium4.4The Data Services Management Console does not sufficiently encode user-controlled inputs, allowing an attacker to inject malicious script.Check if you run itEPSS 0.21%May 13, 2025
- Critical9.8rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.Check if you run itEPSS 0.45%May 13, 2025
- Medium4.3An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.Check if you run itEPSS 0.28%May 12, 2025
- High8.6netalertx netalertx Execution After Redirect (EAR)Patch nowKEVEPSS 67.91%May 12, 2025
- High7.3A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819.Check if you run itEPSS 0.20%May 11, 2025
- Medium6.3A security flaw has been discovered in Dígitro NGC Explorer up to 3.48.21.Check if you run itEPSS 0.62%May 11, 2025
- High8.3code-server runs VS Code on any machine anywhere through browser access.Check this weekEPSS 44.54%May 9, 2025
- High7.0In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.Check if you run itEPSS 0.22%May 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9_client_write() and p9_client_read_once(Check if you run itEPSS 0.72%May 9, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall A deadlock warning occurred when invoking nfs4_put_sCheck if you run itEPSS 0.78%May 9, 2025