Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers to auto-approve denied shell commands by prefixi…Check if you run itEPSS 0.35%Oct 13, 2026
- Critical10.0Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js…Check if you run itEPSS 0.56%Oct 13, 2026
- Low3.3A flaw was found in device-mapper-persistent-data.Check if you run itEPSS 0.14%Oct 13, 2026
- High8.1VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCECheck if you run itEPSS 0.28%Oct 13, 2026
- High7.8Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.Open the advisoryOct 13, 2026
- High7.5Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.Open the advisoryOct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 0.94%Oct 13, 2026
- Critical9.1The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_…Check if you run itEPSS 0.53%Oct 13, 2026
- Medium5.1Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.Check if you run itEPSS 0.13%Oct 13, 2026
- High7.9Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.Check if you run itEPSS 0.12%Oct 13, 2026
- High8.1The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1.Check if you run itEPSS 0.54%Oct 13, 2026
- Medium5.3The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.5The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828.Check if you run itEPSS 0.34%Oct 13, 2026
- High7.5The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execu…Check if you run itEPSS 0.54%Oct 13, 2026
- High7.5The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly veri…Check if you run itEPSS 0.53%Oct 13, 2026
- UnknownCitrix security advisory (AV26-1034)Open the advisoryOct 13, 2026
- High7.5Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash PinningCheck if you run itEPSS 0.17%Oct 13, 2026
- High7.0Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.26%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.74%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.69%Oct 13, 2026
- Medium6.5Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.81%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.74%Oct 13, 2026
- Critical9.4Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.79%Oct 13, 2026
- High8.7Qwik is a performance-focused JavaScript framework.Check if you run itEPSS 0.52%Oct 13, 2026
- High7.8Windows Sysmain Service Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.24%Oct 13, 2026