Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.74%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.84%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 1.27%Oct 13, 2026
- UnknownMalicious code in sysdiagd (PyPI)Open the advisoryOct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.Check if you run itEPSS 0.29%Oct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.Check if you run itEPSS 0.34%Oct 13, 2026
- High8.7Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol.Check if you run itEPSS 0.27%Oct 13, 2026
- Critical10.0Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context ofCheck if you run itEPSS 0.78%Oct 13, 2026
- High8.3Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.60%Oct 13, 2026
- Low3.7A flaw was found in BusyBox's httpd web server.Check if you run itEPSS 0.22%Oct 13, 2026
- Critical9.8Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai…Check if you run itEPSS 1.31%Oct 13, 2026
- Critical9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.72%Oct 13, 2026
- Critical9.8A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium6.3The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP request.Check if you run itEPSS 0.18%Oct 13, 2026
- Medium6.9ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers…Check if you run itEPSS 0.26%Oct 13, 2026
- High7.1fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenti…Check if you run itEPSS 0.30%Oct 13, 2026
- Medium5.3Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by…Check if you run itEPSS 0.25%Oct 13, 2026
- High8.6FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify o…Check if you run itEPSS 0.30%Oct 13, 2026
- Medium5.3Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows authenticated members to access other members' da…Check if you run itEPSS 0.22%Oct 13, 2026
- High7.1Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwrite and d…Check if you run itEPSS 0.27%Oct 13, 2026
- High8.7Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows…Check if you run itEPSS 0.43%Oct 13, 2026
- Medium6.9FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by callin…Check if you run itEPSS 0.41%Oct 13, 2026
- High8.6MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/a…Check if you run itEPSS 0.30%Oct 13, 2026
- Low2.3RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings…Check if you run itEPSS 0.28%Oct 13, 2026
- Medium5.1bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML or SVG files by spoofing the multipart Content…Check if you run itEPSS 0.23%Oct 13, 2026