Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Double free in signal handlerCheck if you run itEPSS 0.10%Oct 13, 2026
- Critical9.8Arbitrary file write in grpc phQueryMasterPatch nowKEVEPSS 0.46%Oct 13, 2026
- Medium5.3A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox ClouCheck if you run itEPSS 0.24%Oct 13, 2026
- Medium6.1arbitrary command execution in fgfmsd daemonCheck if you run itEPSS 0.71%Oct 13, 2026
- Medium4.9An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allowCheck if you run itEPSS 0.28%Oct 13, 2026
- Critical9.8Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution VulnerabilityCheck if you run itEPSS 0.99%Oct 13, 2026
- High8.6Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityPatch nowKEVEPSS 25.98%Oct 13, 2026
- High8.8SQL command injection in webmailCheck if you run itEPSS 0.30%Oct 13, 2026
- High8.1IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.Check if you run itEPSS 0.36%Oct 12, 2026
- High7.4IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM b…Check if you run itEPSS 0.14%Oct 12, 2026
- Critical9.9IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.Check if you run itEPSS 0.52%Oct 12, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements us…Check if you run itEPSS 0.46%Oct 12, 2026
- Medium6.5IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to…Check if you run itEPSS 0.31%Oct 12, 2026
- Critical9.6IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.Check if you run itEPSS 0.41%Oct 12, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element…Check if you run itEPSS 0.43%Oct 12, 2026
- Medium5.4IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.Check if you run itEPSS 0.18%Oct 12, 2026
- High7.5IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.36%Oct 12, 2026
- High8.2IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths.Check if you run itEPSS 0.35%Oct 12, 2026
- Critical9.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.Check if you run itEPSS 0.34%Oct 12, 2026
- High8.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.Check if you run itEPSS 0.34%Oct 12, 2026
- Medium5.4IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.14%Oct 12, 2026
- High7.1IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional…Check if you run itEPSS 0.22%Oct 12, 2026
- Medium5.3Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get_mailboxes and get_quota APIs that allows…Check if you run itEPSS 0.17%Oct 12, 2026
- High7.1Frappe ERPNext before 15.118.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks.Check if you run itEPSS 0.26%Oct 12, 2026
- High8.5Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile field that is rendered without escaping into portal pages.Check if you run itEPSS 0.21%Oct 12, 2026
Sort