Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions).Check if you run itEPSS 0.22%May 13, 2025
- High8.7A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), DeCheck if you run itEPSS 0.57%May 13, 2025
- High8.8The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7.Check if you run itEPSS 0.47%May 13, 2025
- High8.6The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an application servlet request with a crafted XML file which wheCheck if you run itEPSS 0.42%May 13, 2025
- Critical10.0The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload rCheck if you run itEPSS 0.83%May 13, 2025
- Medium5.3The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attaCheck if you run itEPSS 0.37%May 13, 2025
- Medium6.1davidstutz bootstrap_multiselect Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.44%May 13, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 88.00%May 13, 2025
- High7.5Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.93%May 13, 2025
- Critical9.8Fortinet Multiple Products Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 30.94%May 13, 2025
- Medium5.3A vulnerability classified as critical has been found in LmxCMS 1.41.Check if you run itEPSS 0.55%May 11, 2025
- High8.3code-server runs VS Code on any machine anywhere through browser access.Check this weekEPSS 44.54%May 9, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2.Check if you run itEPSS 0.41%May 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: pds_core: make wait_context part of q_info Make the wait_context a full part of the q_info struct rather than aCheck if you run itEPSS 0.30%May 9, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS When testing a special config: CONFIG_NETFS_SUPPORTS=y CONCheck if you run itEPSS 0.26%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported Russell King reports that on the ZIICheck if you run itEPSS 0.29%May 9, 2025
- Critical9.4"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untCheck if you run itEPSS 0.85%May 9, 2025
- High8.4"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may allow unauthorized sourCheck if you run itEPSS 0.50%May 9, 2025
- Medium6.9Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking.Check if you run itEPSS 0.32%May 9, 2025
- Critical9.1Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.Check if you run itEPSS 0.44%May 9, 2025
- Critical9.1Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a networkCheck if you run itEPSS 1.99%May 8, 2025
- Critical9.9Server-side request forgery (ssrf) in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 3.54%May 8, 2025
- High7.8IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by thCheck if you run itEPSS 0.28%May 8, 2025
- High7.8IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by thCheck if you run itEPSS 0.28%May 8, 2025
- Medium4.2Rack::Session is a session management implementation for Rack.Check if you run itEPSS 0.33%May 8, 2025
Sort