Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

3 matching records, 1 with confirmed exploitation.

1. 37
   CVE NVD 4d ago

   GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a…

   GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session by…

   Exploited CVSS 8.2 CVE-2026-112353 GFI USA, LLC
2. 12
   CVE NVD 3d ago

   GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation…

   GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory…

   CVSS 7.8 CVE-2026-112357 GFI USA, LLC
3. 5
   CVE NVD 3d ago

   GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the Webmail component that allows a remote…

   GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the Webmail component that allows a remote attacker to spoof link targets or inject HTML into a message as rendered in a…

   CVSS 6.1 CVE-2026-112356 GFI USA, LLC

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=GFI+USA%2C+LLC&limit=100. RSS for this section: feed.xml.