Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.Check if you run itEPSS 0.44%Jul 10, 2025
- Medium6.5Microsoft SharePoint Improper Authentication VulnerabilityPatch nowKEVEPSS 99.06%Jul 8, 2025
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 100.00%Jul 8, 2025
- High8.7jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Check if you run itEPSS 0.77%Jun 25, 2025
- Critical9.3Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 99.97%Jun 17, 2025
- Medium5.5A logging issue was addressed with improved data redaction.Check if you run itEPSS 0.52%May 29, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 88.00%May 13, 2025
- High7.5Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.93%May 13, 2025
- Critical9.9Server-side request forgery (ssrf) in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 3.54%May 8, 2025
- High8.6A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GLCheck if you run itEPSS 0.40%Apr 26, 2025
- Critical9.2Local File Inclusion (LFI) vulnerability in a Render function of Formulatrix Rock Maker Web (RMW) allows a remote attacker to obtain sensitive data via arbitrary code execution.Check if you run itEPSS 0.93%Apr 21, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return vaCheck if you run itEPSS 0.21%Apr 16, 2025
- Medium5.3Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placehCheck if you run itEPSS 0.36%Apr 15, 2025
- Critical9.8Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Apr 3, 2025
- Unknownvercel next.js Improper AuthorizationPatch nowKEVEPSS 99.22%Mar 28, 2025
- High7.2D-Link DIR-823X Command Injection VulnerabilityPatch nowKEVEPSS 87.94%Mar 25, 2025
- Unknownkubernetes ingress-nginx Improper Isolation or CompartmentalizationPatch nowKEVEPSS 99.40%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized auth-url annotationCheck this weekEPSS 37.28%Mar 23, 2025
- High7.5A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents.Check if you run itEPSS 1.35%Mar 14, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.45%Feb 12, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- High7.5SimpleHelp Path Traversal VulnerabilityPatch nowKEVEPSS 96.83%Jan 15, 2025
- Critical9.8Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 94.35%Jan 14, 2025
- UnknownIvanti Connect Secure, Policy Secure, and Neurons stack-based buffer overflowPatch nowKEVEPSS 17.46%Jan 8, 2025
- Critical9.0Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Jan 8, 2025
Sort