Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials.Check if you run itEPSS 0.63%May 29, 2025
- Medium4.9Strapi is an open-source content management system.Check if you run itEPSS 0.56%May 29, 2025
- High8.2Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() function.Check if you run itEPSS 0.40%May 29, 2025
- High7.3maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings.Check if you run itEPSS 0.37%May 29, 2025
- Medium5.3SummaryThis advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality.Check if you run itEPSS 0.33%May 28, 2025
- Medium4.3IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.54%May 28, 2025
- Medium6.5Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorized groups by exploiting a user interface isCheck if you run itEPSS 0.38%May 28, 2025
- Medium4.8A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemoCheck if you run itEPSS 0.87%May 28, 2025
- Low2.1A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feedsCheck if you run itEPSS 0.21%May 28, 2025
- Low3.4A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker toCheck if you run itEPSS 0.82%May 28, 2025
- High7.2Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.Check if you run itEPSS 0.25%May 28, 2025
- High7.2Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.Check if you run itEPSS 0.25%May 28, 2025
- High7.2Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.Check if you run itEPSS 0.33%May 28, 2025
- Critical10.0NetAlertX is a network, presence scanner and alert framework.Check if you run itEPSS 0.60%May 27, 2025
- Critical9.3Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting.Check if you run itEPSS 0.46%May 27, 2025
- High8.2Django-Select2 is a Django integration for Select2.Check if you run itEPSS 0.33%May 27, 2025
- High7.5An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicioCheck if you run itEPSS 0.62%May 27, 2025
- High7.1An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templatCheck if you run itEPSS 0.37%May 27, 2025
- Medium5.4maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.Check if you run itEPSS 0.35%May 27, 2025
- Unknownanji-plus report Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 51.75%May 27, 2025
- Unknownaviary_image_editor_add-on_for_gravity_forms_project aviary_image_editor_add-on_for_gravity_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 40.59%May 27, 2025
- Medium5.3A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1.Check if you run itEPSS 0.23%May 26, 2025
- Medium5.3A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5.Check if you run itEPSS 0.48%May 26, 2025
- Medium4.6A vulnerability was identified in PhonePe App 25.03.21.0 on Android.Check if you run itEPSS 0.19%May 25, 2025
- Medium5.3A vulnerability classified as critical has been found in Seeyon Zhiyuan OA Web Application System up to 8.1 SP2.Check if you run itEPSS 0.38%May 25, 2025
Sort