Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 thro…Check if you run itEPSS 0.41%Apr 14, 2026
- Critical9.8A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580.Check if you run itEPSS 0.53%Apr 14, 2026
- Medium5.4An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0…Check if you run itEPSS 0.27%Apr 14, 2026
- Medium4.3A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 t…Check if you run itEPSS 0.20%Apr 14, 2026
- Medium4.3An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiN…Check if you run itEPSS 0.26%Apr 14, 2026
- Critical9.1In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * http…Check if you run itEPSS 1.31%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 47.36%Apr 14, 2026
- High8.7A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).Check if you run itEPSS 0.53%Apr 14, 2026
- Critical9.1The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the function in all versions up to, and including,…Check if you run itEPSS 0.85%Apr 14, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.30%Apr 14, 2026
- Medium5.3nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Check if you run itEPSS 0.52%Apr 14, 2026
- Low2.0A vulnerability was identified in HummerRisk up to 1.5.0.Check if you run itEPSS 0.38%Apr 13, 2026
- Low3.1EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.40%Apr 13, 2026
- High7.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.60%Apr 13, 2026
- Low2.1A weakness has been identified in DbGate up to 7.1.4.Check if you run itEPSS 0.34%Apr 13, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Check if you run itEPSS 1.68%Apr 13, 2026
- High7.1Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by mani…Check if you run itEPSS 0.53%Apr 13, 2026
- Medium5.3Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing…Check if you run itEPSS 0.15%Apr 13, 2026
- Medium5.1Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into…Check if you run itEPSS 0.26%Apr 13, 2026
- High7.4A weakness has been identified in Totolink A3002MU B20211125.1046.Check if you run itEPSS 0.79%Apr 13, 2026
- Medium5.8An issue was discovered in HAProxy before 3.3.6.Check if you run itEPSS 0.58%Apr 13, 2026
- Low2.7Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.Check if you run itEPSS 0.32%Apr 13, 2026
- High7.1Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP.Check if you run itEPSS 0.54%Apr 13, 2026
- Critical9.8An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations.Check if you run itEPSS 0.34%Apr 13, 2026
- High7.5Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger.Check if you run itEPSS 0.45%Apr 12, 2026