Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7A denial-of-service security issue exists in the affected product and version.Check if you run itEPSS 0.32%Oct 14, 2025
- High7.0A cross-site request forgery security issue exists in the product and version listed.Check if you run itEPSS 0.21%Oct 14, 2025
- High8.7A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE.Check if you run itEPSS 0.46%Oct 14, 2025
- Medium5.1A vulnerability has been identified in SiPass integrated (All versions < V3.0).Check if you run itEPSS 0.20%Oct 14, 2025
- Medium5.3The webserver is vulnerable to a denial of service condition.Check if you run itEPSS 1.67%Oct 14, 2025
- Low3.8The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRFCheck if you run itEPSS 0.23%Oct 14, 2025
- Medium4.3SAP S/4HANA (Manage Processing Rules - For Bank Statements) allows an authenticated attacker with basic privileges to delete conditions from any shared rule of any user by tamperinCheck if you run itEPSS 0.23%Oct 14, 2025
- Medium5.4Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the sessioCheck if you run itEPSS 0.16%Oct 14, 2025
- Medium6.5karakeep v0.26.0 to v0.7.0 was discovered to contain a Server-Side Request Forgery (SSRF).Check if you run itEPSS 0.36%Oct 14, 2025
- High7.3A Cross-Site Request Forgery (CSRF) in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request.Check if you run itEPSS 0.15%Oct 14, 2025
- Critical9.2Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.53%Oct 14, 2025
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.56%Oct 14, 2025
- Medium5.3Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.Check if you run itEPSS 0.58%Oct 13, 2025
- Medium6.9SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information.Check if you run itEPSS 0.36%Oct 13, 2025
- Medium4.3HCL Unica Campaign 12.1.10 is vulnerable to Reflected Cross-Site Scripting (XSS) where an attacker injects malicious script into an HTTP request, which is then reflected unsafely iCheck if you run itEPSS 0.18%Oct 13, 2025
- UnknownFour-Faith f3x36_firmware Active Debug CodePatch nowKEVEPSS 3.04%Oct 13, 2025
- Unknownrbaskets request_baskets Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 6.59%Oct 13, 2025
- UnknownApache Struts Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 70.21%Oct 13, 2025
- Medium6.3A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini.Check if you run itEPSS 0.46%Oct 12, 2025
- Medium6.3A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036.Check if you run itEPSS 0.40%Oct 12, 2025
- Low3.5HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF).Check if you run itEPSS 0.24%Oct 12, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 95.89%Oct 11, 2025
- Medium4.3The Course Redirects for Learndash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4.Check if you run itEPSS 0.13%Oct 11, 2025
- Medium4.3The Web Accessibility By accessiBe plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10.Check if you run itEPSS 0.16%Oct 11, 2025
- Low2.4The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23.Check if you run itEPSS 0.15%Oct 11, 2025
Sort