https://vulnogram.org/ Most recent CVEs assigned by Financial Security Institute (FSI) (fsi). https://vulnogram.org/seaview/icons/fsi.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-88262 https://vulnogram.org/CVE-2026-88262 Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1. High Network Exploitable Tue, 15 Sep 2026 02:16:27 GMT https://vulnogram.org/CVE-2026-88261 https://vulnogram.org/CVE-2026-88261 Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1. Medium Tue, 15 Sep 2026 02:13:55 GMT https://vulnogram.org/CVE-2026-88260 https://vulnogram.org/CVE-2026-88260 Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion. This issue affects Zenius EMS 8.0: through OAM (Build 109). High Fri, 11 Sep 2026 02:29:52 GMT https://vulnogram.org/CVE-2026-16520 https://vulnogram.org/CVE-2026-16520 Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Ge… High Network Exploitable Thu, 20 Aug 2026 23:57:34 GMT https://vulnogram.org/CVE-2026-9157 https://vulnogram.org/CVE-2026-9157 Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1. High Thu, 21 May 2026 08:07:48 GMT https://vulnogram.org/CVE-2025-15070 https://vulnogram.org/CVE-2025-15070 Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue affects Web Fax: from 3.0 before 3.0.1 Medium Mon, 29 Dec 2025 05:06:21 GMT https://vulnogram.org/CVE-2025-15069 https://vulnogram.org/CVE-2025-15069 Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 3.0.1 High Mon, 29 Dec 2025 05:05:58 GMT https://vulnogram.org/CVE-2025-15068 https://vulnogram.org/CVE-2025-15068 Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse, Session Credential Falsification through Manipulation.This issue affects Web Fax: from 3.0 before 3.0.1 High Mon, 29 Dec 2025 05:05:42 GMT https://vulnogram.org/CVE-2025-15067 https://vulnogram.org/CVE-2025-15067 Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is inst… High Mon, 29 Dec 2025 00:59:38 GMT https://vulnogram.org/CVE-2025-15066 https://vulnogram.org/CVE-2025-15066 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory… Medium Mon, 29 Dec 2025 00:48:56 GMT https://vulnogram.org/CVE-2025-15065 https://vulnogram.org/CVE-2025-15065 Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerability in Kings Information & Network Co. KESS Enterprise on Windows allows Privilege Escalat… High Mon, 29 Dec 2025 00:09:27 GMT https://vulnogram.org/CVE-2025-11020 https://vulnogram.org/CVE-2025-11020 An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows, Linux.This issue aff… High Thu, 02 Oct 2025 05:15:50 GMT https://vulnogram.org/CVE-2025-11221 https://vulnogram.org/CVE-2025-11221 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This iss… Critical Thu, 02 Oct 2025 05:15:16 GMT https://vulnogram.org/CVE-2025-11182 https://vulnogram.org/CVE-2025-11182 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allows Path Traversal.This issue affects ChangeFlow: All versions to v9.0.1.1. High Thu, 02 Oct 2025 05:15:06 GMT https://vulnogram.org/CVE-2025-7672 https://vulnogram.org/CVE-2025-7672 The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XSS. This issue affects CrossEditor4: from 4.0.0.01 before 4.6.0.23. Medium Network Exploitable Tue, 15 Jul 2025 07:23:20 GMT https://vulnogram.org/CVE-2025-3621 https://vulnogram.org/CVE-2025-3621 Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems. * vulnerabilities: * Improper Neutralization of Special Elements used in a Command ('Command Injection') * Use of Hard… Critical Tue, 15 Jul 2025 07:22:49 GMT https://vulnogram.org/CVE-2024-11071 https://vulnogram.org/CVE-2024-11071 Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery (CSRF) attack, which probabil… High Network Exploitable Mon, 07 Apr 2025 06:02:06 GMT