Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges localCheck if you run itEPSS 0.20%Apr 14, 2026
- High7.8InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of anCheck if you run itEPSS 0.17%Apr 14, 2026
- Medium5.5InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure.Check if you run itEPSS 0.16%Apr 14, 2026
- Medium5.5InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.15%Apr 14, 2026
- High7.8InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.17%Apr 14, 2026
- High7.8InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cuCheck if you run itEPSS 0.18%Apr 14, 2026
- High7.8InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currentCheck if you run itEPSS 0.14%Apr 14, 2026
- High8.6Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype PollutCheck if you run itEPSS 0.43%Apr 14, 2026
- Medium6.3Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype PollutCheck if you run itEPSS 0.35%Apr 14, 2026
- Medium6.9CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is abl…Check if you run itEPSS 0.28%Apr 14, 2026
- High8.8A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may allow attacker to…Check if you run itEPSS 0.37%Apr 14, 2026
- Medium4.8A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 t…Check if you run itEPSS 0.20%Apr 14, 2026
- Medium4.9A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all vers…Check if you run itEPSS 0.38%Apr 14, 2026
- High8.1A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrar…Check if you run itEPSS 0.36%Apr 14, 2026
- High8.1A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrari…Check if you run itEPSS 0.36%Apr 14, 2026
- High8.8A Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily reset…Check if you run itEPSS 0.64%Apr 14, 2026
- High7.1Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDataGrid.php.Check if you run itEPSS 0.20%Apr 14, 2026
- High8.5A Server-Side Request Forgery (SSRF) in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan internal resources via supplying a…Check if you run itEPSS 0.25%Apr 14, 2026
- Critical9.9An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x allows attackers to execute arbitrary code via u…Check if you run itEPSS 4.19%Apr 14, 2026
- Medium5.3CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user…Check if you run itEPSS 0.25%Apr 14, 2026
- Medium6.9CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check r…Check if you run itEPSS 0.19%Apr 14, 2026
- Medium5.3CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting log integrity when a Web Admi…Check if you run itEPSS 0.18%Apr 14, 2026
- Medium6.9CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an…Check if you run itEPSS 0.28%Apr 14, 2026
- Low2.4CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user executes a…Check if you run itEPSS 0.10%Apr 14, 2026
- Medium5.3CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset when a Web Admin user a…Check if you run itEPSS 0.23%Apr 14, 2026
Sort