Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1An issue was discovered in Znuny before 7.1.5.Check if you run itEPSS 0.40%May 8, 2025
- Critical9.8An Eval Injection issue was discovered in Znuny through 7.1.3.Check if you run itEPSS 0.50%May 8, 2025
- Critical9.8An issue was discovered in Znuny through 7.1.3.Check if you run itEPSS 0.43%May 8, 2025
- High7.5An issue was discovered in Znuny through 7.1.3.Check if you run itEPSS 0.36%May 8, 2025
- Medium5.4PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters.Check if you run itEPSS 0.39%May 8, 2025
- Medium6.5PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parametCheck if you run itEPSS 0.39%May 8, 2025
- Low2.0i-Educar is free, fully online school management software.Check if you run itEPSS 0.26%May 7, 2025
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 1.21%May 7, 2025
- Medium4.2Rack is a modular Ruby web server interface.Check if you run itEPSS 0.24%May 7, 2025
- Medium6.5On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-serveCheck if you run itEPSS 0.28%May 7, 2025
- High8.7When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in aCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate.Check if you run itEPSS 0.44%May 7, 2025
- High8.7When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requCheck if you run itEPSS 0.44%May 7, 2025
- High8.5When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacCheck this weekEPSS 24.30%May 7, 2025
- High8.7When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.Check if you run itEPSS 0.43%May 7, 2025
- High8.7When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.Check if you run itEPSS 0.44%May 7, 2025
- High8.7On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles.Check if you run itEPSS 0.39%May 7, 2025
- High8.3When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing systCheck if you run itEPSS 0.17%May 7, 2025
- Critical9.2On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-basedCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Check if you run itEPSS 0.43%May 7, 2025
- High8.7When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.43%May 7, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6.Check if you run itEPSS 0.34%May 7, 2025
- Low1.3insa-auth is an authentication server for INSA Rouen.Check if you run itEPSS 0.51%May 7, 2025
- Medium5.3Envoy is a cloud-native edge/middle/service proxy.Check if you run itEPSS 0.27%May 7, 2025
Sort