Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted.Oct 14, 2026
- Medium5.5Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.EPSS 0.2%Oct 13, 2026
- High8.1Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.EPSS 0.6%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- Low3.1H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file .EPSS 0.1%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- Medium5.3CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.EPSS 0.4%Oct 13, 2026
- High8.1IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated a…EPSS 0.6%Oct 8, 2026
- High7.5IBM DataPower Gateway Improper Verification of Cryptographic SignatureEPSS 0.2%Oct 8, 2026
- Medium6.9Contrast is a Kubernetes runtime for confidential containers.EPSS 0.1%Sep 27, 2026
- Critical10.0WSO2 Multiple Products Path Traversal VulnerabilityKEVEPSS 0.6%Aug 6, 2026
- Critical9.5SimpleHelp Authentication Bypass VulnerabilityKEVEPSS 5.7%Jun 12, 2026
- High8.7The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing a…EPSS 0.2%May 27, 2026
- Medium5.3Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers.EPSS 0.2%Dec 11, 2025
- Medium6.5An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.EPSS 0.2%Dec 11, 2025
- Critical9.3The ruby-saml library implements the client side of an SAML authorization.EPSS 0.2%Dec 9, 2025
- Critical9.3The ruby-saml library is for implementing the client side of a SAML authorization.EPSS 0.4%Dec 9, 2025
- Critical9.8Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityKEVEPSS 68.3%Dec 9, 2025
- Medium4.6IGEL OS Use of a Key Past its Expiration Date VulnerabilityKEVEPSS 4.9%Jun 5, 2025
- High7.5A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust.Jan 16, 2024
- High8.0Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityKEVEPSS 9.2%Feb 10, 2022
- High7.8Microsoft Windows Spoofing VulnerabilityKEVEPSS 38.9%Aug 17, 2020
- Critical10.0Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityKEVEPSS 4.4%Jun 29, 2020
26 records · page 1 of 2
PreviousNext