Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The MetForm Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Quiz feature in all versions up to, and including, 3.9.6 due to insufficient…Check if you run itEPSS 0.33%Mar 10, 2026
- Medium6.1An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in benkeen generatedata 4.0.14.Check if you run itEPSS 0.33%Mar 10, 2026
- Critical9.1Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required.Check if you run itEPSS 0.48%Mar 10, 2026
- Critical9.4Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover.Check if you run itEPSS 0.41%Mar 10, 2026
- High7.2A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all vers…Check if you run itEPSS 0.59%Mar 10, 2026
- Medium5.9A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, Forti…Check if you run itEPSS 0.19%Mar 10, 2026
- High7.2A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 thr…Check if you run itEPSS 1.73%Mar 10, 2026
- Critical9.8A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server.Check if you run itEPSS 0.90%Mar 10, 2026
- High7.5SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.Check if you run itEPSS 0.50%Mar 10, 2026
- Medium4.0A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail…Check if you run itEPSS 0.09%Mar 10, 2026
- High8.1A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 a…Check if you run itEPSS 0.89%Mar 10, 2026
- High7.5An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in Fortinet FortiSOAR Agent Communication Bridge…Check if you run itEPSS 0.49%Mar 10, 2026
- Medium4.8An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0…Check if you run itEPSS 0.32%Mar 10, 2026
- High7.2An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.…Check if you run itEPSS 0.46%Mar 10, 2026
- Medium5.3An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all…Check if you run itEPSS 0.49%Mar 10, 2026
- High7.2A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyze…Check if you run itEPSS 0.54%Mar 10, 2026
- Medium6.5An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device.Check if you run itEPSS 0.40%Mar 10, 2026
- Medium5.3An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.Check if you run itEPSS 0.32%Mar 10, 2026
- Medium6.5An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges.Check if you run itEPSS 0.40%Mar 10, 2026
- Critical9.8An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device.Check if you run itEPSS 2.24%Mar 10, 2026
- Critical9.4Affected devices do not properly sanitize contents of trace files.Check if you run itEPSS 0.49%Mar 10, 2026
- Low2.4A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging Station (All versions < L4.10.1).Check if you run itEPSS 0.15%Mar 10, 2026
- High7.5CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administ…Check if you run itEPSS 0.66%Mar 10, 2026
- Medium5.1CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attacke…Check if you run itEPSS 0.24%Mar 10, 2026
- Medium6.9CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attack…Check if you run itEPSS 0.48%Mar 10, 2026
Sort