Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.56%Mar 10, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.43%Mar 10, 2026
- Medium6.6A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all ver…Check if you run itEPSS 0.70%Mar 10, 2026
- High7.5Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.06%Mar 10, 2026
- High8.8Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.89%Mar 10, 2026
- High7.2An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0…Check if you run itEPSS 1.62%Mar 10, 2026
- Medium6.5An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 all versions, Fo…Check if you run itEPSS 0.60%Mar 10, 2026
- Medium6.5A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, For…Check if you run itEPSS 0.40%Mar 10, 2026
- Medium6.6A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions,…Check if you run itEPSS 0.66%Mar 10, 2026
- High8.1An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4…Check if you run itEPSS 0.79%Mar 10, 2026
- High7.2An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyz…Check if you run itEPSS 0.58%Mar 10, 2026
- High7.2A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all vers…Check if you run itEPSS 0.59%Mar 10, 2026
- High7.2A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 thr…Check if you run itEPSS 1.70%Mar 10, 2026
- High8.1A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 a…Check if you run itEPSS 0.89%Mar 10, 2026
- High7.5An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in Fortinet FortiSOAR Agent Communication Bridge…Check if you run itEPSS 0.48%Mar 10, 2026
- Medium4.8An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0…Check if you run itEPSS 0.32%Mar 10, 2026
- High7.2An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.…Check if you run itEPSS 0.46%Mar 10, 2026
- Medium5.3An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all…Check if you run itEPSS 0.48%Mar 10, 2026
- High7.1InstantCMS is a free and open source content management system.Check if you run itEPSS 0.17%Mar 10, 2026
- Medium5.9Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module.Check if you run itEPSS 0.30%Mar 10, 2026
- Medium6.4SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints.Check if you run itEPSS 0.17%Mar 10, 2026
- UnknownPath Equivalence: 'filename....' (Multiple Trailing Dot)Patch nowKEVEPSS 2.66%Mar 10, 2026
- Critical9.1Budibase is a low code platform for creating internal tools, workflows, and admin panels.Patch nowKEVEPSS 2.19%Mar 9, 2026
- High8.1Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.33%Mar 9, 2026
- Critical9.8vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.75%Mar 9, 2026