Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Check if you run itEPSS 0.46%Oct 15, 2025
- High8.7When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.35%Oct 15, 2025
- High8.7When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed JSON schema, and the security policy is applied to a virtualCheck if you run itEPSS 0.35%Oct 15, 2025
- High8.7When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminCheck if you run itEPSS 0.35%Oct 15, 2025
- High7.1When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization.Check if you run itEPSS 0.38%Oct 15, 2025
- High8.7When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Check if you run itEPSS 0.43%Oct 15, 2025
- High8.7When a BIG-IP AFM denial-of-service (DoS) protection profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to tCheck if you run itEPSS 0.37%Oct 15, 2025
- Medium6.9When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or when an NGINX server is configured with App Protect Bot Defense, unCheck if you run itEPSS 0.39%Oct 15, 2025
- High7.1When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity Provider (IdP), with single logout (SLO) enabled on an aCheck if you run itEPSS 0.39%Oct 15, 2025
- Medium4.4The Task Scheduler plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.3 via the “Check Website” task.Check if you run itEPSS 0.24%Oct 15, 2025
- Medium4.3The Theme Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Oct 15, 2025
- Medium4.3The TopBar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.17%Oct 15, 2025
- Medium4.3The FunKItools plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.13%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix blk_mq_tags double free while nr_requests grown In the case user trigger tags grow by queue sysfs atCheck if you run itEPSS 0.20%Oct 15, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request.Check if you run itEPSS 0.15%Oct 15, 2025
- Medium6.8A vulnerability exists in certain Dahua embedded products.Check if you run itEPSS 0.46%Oct 15, 2025
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 44.45%Oct 15, 2025
- Critical9.9Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.Check this weekEPSS 66.53%Oct 14, 2025
- High7.2A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAn…Check if you run itEPSS 0.54%Oct 14, 2025
- Medium4.5An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.Check if you run itEPSS 0.40%Oct 14, 2025
- Medium6.7An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; ForCheck if you run itEPSS 0.68%Oct 14, 2025
- Low2.5An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOSCheck if you run itEPSS 0.25%Oct 14, 2025
- Low2.5An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer DerefereCheck if you run itEPSS 0.62%Oct 14, 2025
- Medium5.4EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.14%Oct 14, 2025
- High7.2Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 anCheck if you run itEPSS 1.32%Oct 14, 2025
Sort