Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.34%Mar 10, 2026
- High7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 3.18%Mar 10, 2026
- Medium6.9CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends maliCheck if you run itEPSS 0.53%Mar 10, 2026
- High8.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 1.24%Mar 10, 2026
- Critical10.0OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 1.30%Mar 10, 2026
- Critical10.0OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.55%Mar 10, 2026
- High7.1StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.53%Mar 10, 2026
- High8.8StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.64%Mar 10, 2026
- High7.2A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FCheck if you run itEPSS 1.91%Mar 10, 2026
- High7.5An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in Fortinet FortiSOAR Agent Communication Bridge 1.1.0, FortiCheck if you run itEPSS 0.54%Mar 10, 2026
- Medium6.1An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remoteCheck if you run itEPSS 0.39%Mar 10, 2026
- High8.1An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.Check if you run itEPSS 0.89%Mar 10, 2026
- Low3.7An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all versCheck if you run itEPSS 0.42%Mar 10, 2026
- Medium6.3A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0Check if you run itEPSS 0.21%Mar 10, 2026
- High7.2A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 throuCheck if you run itEPSS 0.59%Mar 10, 2026
- High7.2An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4Check if you run itEPSS 0.51%Mar 10, 2026
- High7.2A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnCheck if you run itEPSS 0.65%Mar 10, 2026
- Medium4.8An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandCheck if you run itEPSS 0.36%Mar 10, 2026
- Medium5.3An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions mayCheck if you run itEPSS 0.53%Mar 10, 2026
- High8.1A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions mCheck if you run itEPSS 0.97%Mar 10, 2026
- High8.3Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.69%Mar 10, 2026
- Medium5.9Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric CNC M800V Series M800VW and M800VS, M80V Series M80V and M80V…Check if you run itEPSS 0.58%Mar 10, 2026
- Medium4.0A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 throughCheck if you run itEPSS 0.10%Mar 10, 2026
- High7.2An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allowCheck if you run itEPSS 1.96%Mar 10, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.52%Mar 10, 2026
Sort