Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the application which may lead to unauthenticated Remote Code ExeCheck if you run itEPSS 0.52%Oct 14, 2025
- Medium6.5A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote attacker to conduct a denial of service attack.Check if you run itEPSS 0.26%Oct 14, 2025
- High7.1A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signedCheck if you run itEPSS 0.15%Oct 14, 2025
- Medium4.6A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model.Check if you run itEPSS 0.19%Oct 14, 2025
- High7.2A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAn…Check if you run itEPSS 0.54%Oct 14, 2025
- Medium4.3A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions,…Check if you run itEPSS 0.47%Oct 14, 2025
- Medium6.0A potential out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.Check if you run itEPSS 0.14%Oct 14, 2025
- High7.6Clevo’s UEFI firmware update packages, including B10717.exe, inadvertently contained private signing keys used for Boot Guard and Boot Policy Manifest verification.Check if you run itEPSS 0.26%Oct 14, 2025
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Action access configuration modules) allCheck if you run itEPSS 0.21%Oct 14, 2025
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts templates configuration modules) allowCheck if you run itEPSS 0.21%Oct 14, 2025
- Low2.6A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versioCheck if you run itEPSS 0.36%Oct 14, 2025
- Low2.9mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail.Check if you run itEPSS 0.43%Oct 14, 2025
- Medium6.5Fortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.34%Oct 14, 2025
- Medium4.5An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.Check if you run itEPSS 0.40%Oct 14, 2025
- Medium6.8An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versionsCheck if you run itEPSS 0.11%Oct 14, 2025
- Medium6.7An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; ForCheck if you run itEPSS 0.68%Oct 14, 2025
- Low2.5An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOSCheck if you run itEPSS 0.25%Oct 14, 2025
- Low2.5An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer DerefereCheck if you run itEPSS 0.62%Oct 14, 2025
- High8.5Home Assistant is open source home automation software that puts local control and privacy first.Check if you run itEPSS 0.42%Oct 14, 2025
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Resource access configuration modules) aCheck if you run itEPSS 0.26%Oct 14, 2025
- High8.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.47%Oct 14, 2025
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps group configuration modules) alloCheck if you run itEPSS 0.26%Oct 14, 2025
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps manufacturer configuration moduleCheck if you run itEPSS 0.26%Oct 14, 2025
- High8.1Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.59%Oct 14, 2025
- Medium6.0Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guestCheck if you run itEPSS 0.21%Oct 14, 2025
Sort