Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.9An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all versionsCheck this weekEPSS 55.00%Jun 10, 2025
- Low3.1An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker toCheck this weekEPSS 21.00%Jun 10, 2025
- Medium6.0An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClCheck this weekEPSS 38.00%Jun 10, 2025
- Medium6.5An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7Check this weekEPSS 85.00%Jun 10, 2025
- Low3.0An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all veCheck if you run itEPSS 0.40%Jun 10, 2025
- Medium4.4An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions mCheck if you run itEPSS 1.16%Jun 10, 2025
- High8.4IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of paCheck if you run itEPSS 0.22%Jun 10, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in salesup2019 Formulario de contacto SalesUp! formularios-de-contacto-salesup alCheck if you run itEPSS 0.21%Jun 9, 2025
- Medium6.8An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authentication ModuleCheck if you run itEPSS 0.29%Jun 9, 2025
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 33.98%Jun 7, 2025
- Critical9.8This issue was addressed through improved state management.Check if you run itEPSS 0.30%May 29, 2025
- Medium5.5A logging issue was addressed with improved data redaction.Check if you run itEPSS 0.48%May 29, 2025
- Medium5.3FreeScout is a free self-hosted help desk and shared mailbox.Check this weekEPSS 39.00%May 29, 2025
- Medium5.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally.Check if you run itEPSS 0.18%May 29, 2025
- Critical9.0A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and vCheck this weekEPSS 94.00%May 28, 2025
- Medium4.8A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemoCheck this weekEPSS 84.00%May 28, 2025
- Low3.4A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker toCheck this weekEPSS 79.00%May 28, 2025
- Medium6.8Radashi is a TypeScript utility toolkit.Check this weekEPSS 65.00%May 27, 2025
- Medium5.3A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517.Check this weekEPSS 50.00%May 26, 2025
- Medium4.7Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive dataCheck if you run itEPSS 0.21%May 23, 2025
- UnknownCisco IOS HTTP Server '?/' String VulnerabilityPatch nowKEVEPSS 4.29%May 22, 2025
- Medium4.3Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internCheck if you run itEPSS 0.24%May 21, 2025
- High8.8KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interceptionCheck if you run itEPSS 0.19%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfs2: convert w_pages to w_folios") and commCheck if you run itEPSS 0.16%May 20, 2025