Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%Oct 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.87%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.28%Oct 13, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.44%Oct 13, 2026
- Unknownservmask all-in-one_wp_migration Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.96%Oct 13, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.96%Oct 13, 2026
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 3.03%Oct 13, 2026
- UnknownWPDeveloper essential_addons_for_elementor Improper Privilege ManagementPatch nowKEVEPSS 0.38%Oct 13, 2026
- Unknownw3eden download_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.30%Oct 13, 2026
- Unknownweplugins wp_maps Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Oct 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.29%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 2.65%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.30%Oct 13, 2026
- Unknownninjaforms ninja_forms_file_uploads Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.60%Oct 13, 2026
- Unknownproperfraction profilepress Improper Privilege ManagementPatch nowKEVEPSS 0.39%Oct 13, 2026
- Unknowndokan dokan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Oct 13, 2026
- Unknownwpforms wpforms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.48%Oct 13, 2026
- High7.3ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass VulnerabilityOpen the advisoryOct 13, 2026
- Low3.8A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requestsCheck if you run itEPSS 0.21%Oct 13, 2026
- Low2.3Double free in signal handlerCheck if you run itEPSS 0.10%Oct 13, 2026
- UnknownGUI Denial of ServiceOpen the advisoryOct 13, 2026
- Critical9.8Arbitrary file write in grpc phQueryMasterPatch nowKEVEPSS 1.00%Oct 13, 2026
- Medium5.3A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox ClouCheck if you run itEPSS 0.24%Oct 13, 2026
- Medium6.1arbitrary command execution in fgfmsd daemonCheck if you run itEPSS 0.71%Oct 13, 2026
Sort