Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9A vulnerability in the GRUB2 bootloader has been identified in the normal module.Check if you run itEPSS 0.15%Nov 18, 2025
- Medium4.9A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service (DoS) risk.Check if you run itEPSS 0.14%Nov 18, 2025
- High7.8A Use-After-Free vulnerability has been discovered in GRUB's gettext module.Check if you run itEPSS 0.22%Nov 18, 2025
- Medium4.8A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component.Check if you run itEPSS 0.21%Nov 18, 2025
- Medium4.9A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader).Check if you run itEPSS 0.15%Nov 18, 2025
- Medium6.9A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 alCheck if you run itEPSS 0.66%Nov 18, 2025
- Medium6.3An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions mCheck if you run itEPSS 0.38%Nov 18, 2025
- Medium6.9A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 alCheck if you run itEPSS 0.36%Nov 18, 2025
- Medium6.0An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0Check if you run itEPSS 0.18%Nov 18, 2025
- Medium5.0An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions,Check if you run itEPSS 0.34%Nov 18, 2025
- Medium4.8A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticatedCheck if you run itEPSS 0.13%Nov 18, 2025
- Low3.8A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all veCheck if you run itEPSS 0.12%Nov 18, 2025
- Medium4.9An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a locaCheck if you run itEPSS 0.17%Nov 18, 2025
- Low3.9An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versiCheck if you run itEPSS 0.25%Nov 18, 2025
- Medium6.3A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtendCheck if you run itEPSS 0.17%Nov 18, 2025
- Medium5.2A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FCheck if you run itEPSS 0.17%Nov 18, 2025
- Low3.9An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2 all versions,Check if you run itEPSS 0.21%Nov 18, 2025
- High7.1A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 may allow an authenticCheck if you run itEPSS 0.16%Nov 18, 2025
- High7.7An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoiceCheck if you run itEPSS 0.34%Nov 18, 2025
- High7.1An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 mCheck if you run itEPSS 0.17%Nov 18, 2025
- High7.8NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue.Check if you run itEPSS 0.49%Nov 18, 2025
- Low3.5Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple multi step form allows Cross-Site Scripting (XSS).This issue affCheck if you run itEPSS 0.19%Nov 18, 2025
- Medium5.4Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6.Check if you run itEPSS 0.21%Nov 18, 2025
- High7.0GoSign Desktop versions 2.4.0 and earlier use an unsigned update manifest for distributing application updates.Check if you run itEPSS 0.11%Nov 18, 2025
- Medium4.3pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation.Check if you run itEPSS 0.31%Nov 18, 2025
Sort