Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImportant: kernel security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- High7.0Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.18%Oct 13, 2026
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.46%Oct 13, 2026
- High7.8Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.30%Oct 13, 2026
- Medium6.8Distribution: Client does not verify returned content against requested digestCheck if you run itEPSS 0.21%Oct 13, 2026
- Low2.1Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML with…Check if you run itEPSS 0.24%Oct 13, 2026
- High7.0KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into theCheck if you run itEPSS 1.02%Oct 13, 2026
- Critical9.1The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_…Check if you run itEPSS 0.53%Oct 13, 2026
- High8.1The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the cl…Check if you run itEPSS 0.85%Oct 13, 2026
- High7.5The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execu…Check if you run itEPSS 0.54%Oct 13, 2026
- High7.8Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%Oct 13, 2026
- High7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.25%Oct 13, 2026
- Medium6.5A flaw was found in BusyBox's udhcpc DHCP client.Check if you run itEPSS 0.19%Oct 13, 2026
- Medium5.1Frappe is a full-stack web application framework.Check if you run itEPSS 0.42%Oct 13, 2026
- High7.1fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenti…Check if you run itEPSS 0.30%Oct 13, 2026
- Medium6.1The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more.Check if you run itEPSS 0.19%Oct 13, 2026
- Critical9.3TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web.Check if you run itEPSS 0.52%Oct 13, 2026
- Medium6.9Axios is a promise-based HTTP client for the browser and Node.js.Check if you run itEPSS 0.53%Oct 13, 2026
- High8.8Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCheck if you run itEPSS 0.33%Oct 13, 2026
- High7.1Incorrect authorization in MongoDB Server router for bulk writes to system namespacesCheck if you run itEPSS 0.24%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCheck if you run itEPSS 0.14%Oct 13, 2026
- High7.5Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicio…Check if you run itEPSS 0.45%Oct 13, 2026
- High7.1CvFWD contained a null pointer dereference affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained an out-of-bounds write affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained an integer overflow affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026