Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges lCheck if you run itEPSS 0.25%Dec 9, 2025
- High7.1DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service.Check if you run itEPSS 0.20%Dec 9, 2025
- Medium5.5DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.17%Dec 9, 2025
- High7.1DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure or application denial of service.Check if you run itEPSS 0.18%Dec 9, 2025
- High7.8DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.21%Dec 9, 2025
- Medium6.5An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 allCheck if you run itEPSS 0.26%Dec 9, 2025
- Medium6.8An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versiCheck if you run itEPSS 0.23%Dec 9, 2025
- Medium6.5An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requeCheck if you run itEPSS 0.31%Dec 9, 2025
- Medium5.6Fortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.30%Dec 9, 2025
- High7.2A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiCheck if you run itEPSS 1.71%Dec 9, 2025
- Low2.7An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthentiCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Portabilis i-Educar allows Stored Cross-Site Scripting (XSS) via the matriculaCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium6.5givewp givewp Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.30%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issuCheck if you run itEPSS 0.28%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/aCheck if you run itEPSS 0.22%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in paysera WooCommerce Payment Gateway - Paysera woo-payment-gateway-paysera allows Exploiting Incorrectly Configured Access Control Security LeCheck if you run itEPSS 0.22%Dec 9, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ProteusThemes Custom Sidebars by ProteusThemes custom-sidebars-by-proteusthemes allows Cross Site Request Forgery.This issue affeCheck if you run itEPSS 0.13%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyTCheck if you run itEPSS 0.25%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hype: from n/a through <= 1.0.5.Check if you run itEPSS 0.36%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in WebToffee WebToffee eCommerce Marketing Automation decorator-woocommerce-email-customizer allows Exploiting Incorrectly Configured Access ConCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows Cross Site Request Forgery.This issue affects SupportCandy: from n/a through <= 3.4.Check if you run itEPSS 0.12%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in Shahjahan Jewel Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FlueCheck if you run itEPSS 0.18%Dec 9, 2025
- Medium5.3Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/aCheck if you run itEPSS 0.25%Dec 9, 2025
- Medium5.4Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Exploiting Incorrectly Configured AccessCheck if you run itEPSS 0.25%Dec 9, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wappointment team Wappointment wappointment allows Stored XSS.This issue affecCheck if you run itEPSS 0.19%Dec 9, 2025
Sort