Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started occurring after commit 9dd05df840Check this weekEPSS 21.00%Jun 18, 2025
- High7.4Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debugCheck if you run itEPSS 9.00%Jun 16, 2025
- Medium4.8An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other usCheck this weekEPSS 27.00%Jun 16, 2025
- Medium4.3The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium6.1A flaw was found in GIMP.Check if you run itEPSS 0.59%Jun 13, 2025
- Medium4.2Apple Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 1.19%Jun 11, 2025
- High8.2An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software.Check if you run itEPSS 0.43%Jun 10, 2025
- Medium5.6A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0 throuCheck if you run itEPSS 0.45%Jun 10, 2025
- Low3.9An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all versionsCheck this weekEPSS 55.00%Jun 10, 2025
- Low3.1An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker toCheck this weekEPSS 21.00%Jun 10, 2025
- Medium6.0An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClCheck this weekEPSS 38.00%Jun 10, 2025
- Medium6.5An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7Check this weekEPSS 85.00%Jun 10, 2025
- Low3.0An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all veCheck if you run itEPSS 0.40%Jun 10, 2025
- Medium4.4An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions mCheck if you run itEPSS 1.16%Jun 10, 2025
- High8.4IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of paCheck if you run itEPSS 0.22%Jun 10, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 27.49%Jun 10, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in salesup2019 Formulario de contacto SalesUp! formularios-de-contacto-salesup alCheck if you run itEPSS 0.21%Jun 9, 2025
- Medium6.8An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authentication ModuleCheck if you run itEPSS 0.29%Jun 9, 2025
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 33.98%Jun 7, 2025
- Critical9.8This issue was addressed through improved state management.Check if you run itEPSS 0.30%May 29, 2025
- Medium5.5A logging issue was addressed with improved data redaction.Check if you run itEPSS 0.48%May 29, 2025
- Medium5.3FreeScout is a free self-hosted help desk and shared mailbox.Check this weekEPSS 39.00%May 29, 2025
- Medium5.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally.Check if you run itEPSS 0.18%May 29, 2025
- Critical9.0A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and vCheck this weekEPSS 94.00%May 28, 2025
- Medium4.8A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemoCheck this weekEPSS 84.00%May 28, 2025