Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Id parameter of /Mobile/ContactDetails.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope parameter of /Mondo/lang/sys/Forms/CAL/compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Message parameter of /Mobile/Compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the theme parameter of /Mondo/lang/sys/Forms/Statistics.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- High8.8NVIDIA NVTabular for Linux contains a vulnerability in the Workflow component, where a user could cause a deserialization issue.Check if you run itEPSS 0.66%Dec 9, 2025
- High8.8NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue.Check if you run itEPSS 0.66%Dec 9, 2025
- Medium6.6Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Check if you run itEPSS 0.09%Dec 9, 2025
- High7.3Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Check if you run itEPSS 0.10%Dec 9, 2025
- Medium6.8An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versiCheck if you run itEPSS 0.23%Dec 9, 2025
- Medium5.6Fortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.30%Dec 9, 2025
- Low2.7An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthentiCheck if you run itEPSS 0.21%Dec 9, 2025
- Low1.1An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, toCheck if you run itEPSS 1.15%Dec 9, 2025
- Medium5.4Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a throughCheck if you run itEPSS 0.25%Dec 9, 2025
- Medium5.4The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcodeCheck if you run itEPSS 0.48%Dec 9, 2025
- High8.4EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access.Check if you run itEPSS 0.77%Dec 9, 2025
- Low2.3A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific condCheck if you run itEPSS 0.22%Dec 9, 2025
- Medium5.8EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access.Check if you run itEPSS 0.14%Dec 9, 2025
Sort