Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…Check if you run itEPSS 0.47%Apr 14, 2026
- Medium6.5An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 thro…Check if you run itEPSS 0.41%Apr 14, 2026
- Medium6.5Fortinet Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 1.08%Apr 14, 2026
- High7.1A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-…Check if you run itEPSS 0.29%Apr 14, 2026
- High7.1A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scr…Check if you run itEPSS 0.29%Apr 14, 2026
- Critical9.8A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files.Check if you run itEPSS 6.58%Apr 14, 2026
- Critical9.1In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * http…Check if you run itEPSS 1.31%Apr 14, 2026
- Medium6.3A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V25…Check if you run itEPSS 0.14%Apr 14, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.52%Apr 14, 2026
- High8.4PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.23%Apr 14, 2026
- Critical9.8A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote code execution via the JMX monitoring port.Check if you run itEPSS 0.92%Apr 14, 2026
- Low2.9jq is a command-line JSON processor.Check if you run itEPSS 0.35%Apr 14, 2026
- Medium6.1Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that is interp…Check if you run itEPSS 0.29%Apr 14, 2026
- High7.1Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by mani…Check if you run itEPSS 0.53%Apr 13, 2026
- Medium5.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.36%Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage_client.phpCheck if you run itEPSS 0.31%Apr 13, 2026
- Critical9.8Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.54%Apr 13, 2026
- High8.0Totara LMS v19.1.5 and before is vulnerable to HTML Injection.Check if you run itEPSS 0.43%Apr 13, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Apache Storm.Check if you run itEPSS 1.05%Apr 13, 2026
- High7.4A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730.Check if you run itEPSS 0.79%Apr 13, 2026
- Medium5.5A flaw has been found in chatboxai chatbox up to 1.20.0.Check if you run itEPSS 2.11%Apr 12, 2026
- High7.5Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger.Check if you run itEPSS 0.45%Apr 12, 2026
- High7.5Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.5Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.4A flaw has been found in Tenda F451 1.0.0.7.Check if you run itEPSS 0.95%Apr 12, 2026