Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.2An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 alCheck if you run itEPSS 0.20%Aug 12, 2025
- High7.9An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versionsCheck if you run itEPSS 0.73%Aug 12, 2025
- Medium5.2An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5,Check if you run itEPSS 0.63%Aug 12, 2025
- Medium4.8An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions,Check if you run itEPSS 0.48%Aug 12, 2025
- Medium5.1During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources on the server was disCheck if you run itEPSS 0.17%Aug 12, 2025
- High8.1SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when submitted to a BIC Document application, could cause a memory coCheck if you run itEPSS 0.42%Aug 12, 2025
- Low3.5Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for tesCheck if you run itEPSS 0.46%Aug 12, 2025
- Unknownshibboleth xmltooling Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.89%Aug 12, 2025
- High8.6stirlingpdf stirling_pdf Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.00%Aug 11, 2025
- High8.6Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network trafCheck if you run itEPSS 0.30%Aug 11, 2025
- High7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoCheck if you run itEPSS 0.34%Aug 11, 2025
- Medium5.9Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an iCheck if you run itEPSS 0.30%Aug 11, 2025
- Medium5.9Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an iCheck if you run itEPSS 0.29%Aug 11, 2025
- High7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoCheck if you run itEPSS 0.34%Aug 11, 2025
- Medium5.4Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability.Check if you run itEPSS 0.19%Aug 11, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.46%Aug 11, 2025
- Medium5.3A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic.Check if you run itEPSS 0.36%Aug 10, 2025
- Medium6.9A vulnerability has been found in Open5GS up to 2.7.5.Check if you run itEPSS 0.61%Aug 10, 2025
- Medium5.3A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic.Check if you run itEPSS 0.40%Aug 10, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06.Check if you run itEPSS 0.48%Aug 9, 2025
- Low3.7OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.Check if you run itEPSS 0.20%Aug 9, 2025
- Medium5.3OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.Check if you run itEPSS 0.22%Aug 9, 2025
- Medium5.2Craft is a platform for creating digital experiences.Check if you run itEPSS 0.50%Aug 9, 2025
- Medium5.3A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic.Check if you run itEPSS 0.24%Aug 8, 2025
- Critical9.3XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server.Check if you run itEPSS 1.65%Aug 8, 2025
Sort