Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.8A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requestsCheck if you run itEPSS 0.21%Oct 13, 2026
- Low2.3Double free in signal handlerCheck if you run itEPSS 0.10%Oct 13, 2026
- UnknownGUI Denial of ServiceOpen the advisoryOct 13, 2026
- Critical9.8Arbitrary file write in grpc phQueryMasterPatch nowKEVEPSS 1.00%Oct 13, 2026
- Medium5.3A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox ClouCheck if you run itEPSS 0.24%Oct 13, 2026
- Medium6.1arbitrary command execution in fgfmsd daemonCheck if you run itEPSS 0.71%Oct 13, 2026
- Medium4.9An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allowCheck if you run itEPSS 0.28%Oct 13, 2026
- Critical9.8Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution VulnerabilityCheck if you run itEPSS 1.66%Oct 13, 2026
- High8.6Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityPatch nowKEVEPSS 86.77%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution VulnerabilityCheck if you run itEPSS 0.91%Oct 13, 2026
- Unknownscripteo ads_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.35%Oct 13, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.46%Oct 13, 2026
- High8.8SQL command injection in webmailCheck if you run itEPSS 0.30%Oct 13, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.49%Oct 13, 2026
- UnknownUltimate Member ultimate_member Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.72%Oct 13, 2026
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- Unknowndynamiapps frontend_admin Improper Privilege ManagementPatch nowKEVEPSS 0.72%Oct 13, 2026
- UnknownFunnelKit funnel_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.25%Oct 13, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- Unknowngivewp givewp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 13, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.50%Oct 13, 2026
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.66%Oct 13, 2026
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 1.39%Oct 13, 2026
- Unknownhashthemes hash_form Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
Sort