Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.20%Apr 14, 2026
- Medium5.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.25%Apr 14, 2026
- Medium6.9Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.Check if you run itEPSS 0.38%Apr 14, 2026
- Critical9.8An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6.Check if you run itEPSS 0.45%Apr 14, 2026
- Medium6.8October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.40%Apr 14, 2026
- High7.8Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Apr 14, 2026
- High7.1Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDataGrid.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Medium6.9CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an…Check if you run itEPSS 0.27%Apr 14, 2026
- High8.1A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, F…Check if you run itEPSS 0.28%Apr 14, 2026
- Critical9.8In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin/between-date-reprtsdetails.php through the fro…Check if you run itEPSS 0.29%Apr 14, 2026
- Medium6.1In manikandan580 School-management-system 1.0, a reflected cross-site scripting (XSS) vulnerability exists in /studentms/admin/contact-us.php via the email POST parameter.Check if you run itEPSS 0.18%Apr 14, 2026
- Medium4.3An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiN…Check if you run itEPSS 0.26%Apr 14, 2026
- Medium5.4Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions.Check if you run itEPSS 0.34%Apr 14, 2026
- Medium5.7Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.Check if you run itEPSS 0.59%Apr 14, 2026
- Medium6.9A flaw was found in Keycloak, specifically in the organization selection login page.Check if you run itEPSS 0.36%Apr 14, 2026
- Low2.7SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/view_details.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_storage_unit.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Critical9.8A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files.Check if you run itEPSS 6.58%Apr 14, 2026
- High7.8Microsoft Defender Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 6.75%Apr 14, 2026
- Critical9.8Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityPatch nowKEVEPSS 77.05%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 93.19%Apr 14, 2026
- Medium4.3The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPress is vulnerable to unauthorized access of data due to a improper ca…Check if you run itEPSS 0.18%Apr 14, 2026
- Medium4.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.Check if you run itEPSS 0.71%Apr 14, 2026
Sort