Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to reach the Juniper Web DevCheck if you run itEPSS 0.24%Jul 11, 2025
- Medium6.9A Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to bypass security rCheck if you run itEPSS 0.30%Jul 11, 2025
- High7.1A Reachable Assertion vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to causCheck if you run itEPSS 0.30%Jul 11, 2025
- Medium6.8An Improper Access Control vulnerability in the User Interface (UI) of Juniper Networks Junos OS allows a local, low-privileged attacker to bring down an interface, leading to a DeCheck if you run itEPSS 0.16%Jul 11, 2025
- High7.1An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sendCheck if you run itEPSS 0.33%Jul 11, 2025
- High7.1An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards alloCheck if you run itEPSS 0.31%Jul 11, 2025
- Medium6.0A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a DCheck if you run itEPSS 0.25%Jul 11, 2025
- High7.1An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attaCheck if you run itEPSS 0.32%Jul 11, 2025
- High7.1An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjacCheck if you run itEPSS 0.32%Jul 11, 2025
- High8.2An Improper Handling of Exceptional Conditions vulnerability in Berkeley Packet Filter (BPF) processing of Juniper Networks Junos OS allows an attacker, in rare cases, sending specCheck if you run itEPSS 0.50%Jul 11, 2025
- High7.1An Improper Handling of Exceptional Conditions vulnerability in route processing of Juniper Networks Junos OS on specific end-of-life (EOL) ACX Series platforms allows an attackerCheck if you run itEPSS 0.30%Jul 11, 2025
- High8.7A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP update withCheck if you run itEPSS 0.52%Jul 11, 2025
- Medium5.3A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with potenCheck if you run itEPSS 0.33%Jul 11, 2025
- Medium5.3A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's method.Check if you run itEPSS 0.50%Jul 11, 2025
- Medium4.1The Broken Link Notifier plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.3.0 via broken links that are later exported.Check if you run itEPSS 0.26%Jul 11, 2025
- High7.5The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to SQL Injection via several parameters in the MJ_gmgt_delete_class_limit_for_member, MJ_gmgt_get_yeaCheck if you run itEPSS 0.37%Jul 11, 2025
- Medium6.4fooplugins foogallery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Jul 11, 2025
- Medium6.4The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress is vuCheck if you run itEPSS 0.22%Jul 11, 2025
- Critical9.8The GB Forms DB plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.2 via the gbfdb_talk_to_front() function.Check if you run itEPSS 0.98%Jul 11, 2025
- Medium6.8Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so.Check if you run itEPSS 0.15%Jul 11, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJul 11, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJul 11, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJul 11, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJul 11, 2025
- None0.0Rejected reason: Not usedOpen the advisoryJul 11, 2025
Sort