Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8NVIDIA NVTabular for Linux contains a vulnerability in the Workflow component, where a user could cause a deserialization issue.Check if you run itEPSS 0.66%Dec 9, 2025
- High8.8NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue.Check if you run itEPSS 0.66%Dec 9, 2025
- High7.1DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service.Check if you run itEPSS 0.20%Dec 9, 2025
- Medium5.5DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.17%Dec 9, 2025
- High7.1DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure or application denial of service.Check if you run itEPSS 0.18%Dec 9, 2025
- High7.8DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.21%Dec 9, 2025
- Medium6.6Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Check if you run itEPSS 0.09%Dec 9, 2025
- High7.3Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Check if you run itEPSS 0.10%Dec 9, 2025
- Medium4.3The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.17.Check if you run itEPSS 0.15%Dec 9, 2025
- Medium6.3An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7Check if you run itEPSS 0.40%Dec 9, 2025
- Critical9.1Fortinet FortiWeb Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 29.22%Dec 9, 2025
- Medium6.9An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, ForCheck this weekEPSS 12.20%Dec 9, 2025
- Medium5.3An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandCheck if you run itEPSS 6.31%Dec 9, 2025
- High7.0An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, ForCheck this weekEPSS 17.19%Dec 9, 2025
- Medium6.5An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 allCheck if you run itEPSS 0.26%Dec 9, 2025
- Medium6.8An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versiCheck if you run itEPSS 0.23%Dec 9, 2025
- Medium6.5An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requeCheck if you run itEPSS 0.31%Dec 9, 2025
- Medium5.6Fortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.30%Dec 9, 2025
- Medium6.8An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7, FoCheck if you run itEPSS 0.32%Dec 9, 2025
- High7.2A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiCheck if you run itEPSS 1.71%Dec 9, 2025
- Low2.7An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthentiCheck if you run itEPSS 0.21%Dec 9, 2025
- Low2.6A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, ForCheck if you run itEPSS 0.23%Dec 9, 2025
- Medium4.4A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWebCheck if you run itEPSS 0.34%Dec 9, 2025
- High7.7Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoiCheck if you run itEPSS 0.46%Dec 9, 2025
- High7.1A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10,Check if you run itEPSS 8.35%Dec 9, 2025
Sort