Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.36%Oct 13, 2026
- High7.1AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access.Check if you run itEPSS 0.11%Oct 13, 2026
- High8.2AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access.Check if you run itEPSS 0.12%Oct 13, 2026
- High8.3AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access.Check if you run itEPSS 0.12%Oct 13, 2026
- UnknownMalicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)Open the advisoryOct 13, 2026
- Medium5.9A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.37%Oct 13, 2026
- Medium5.5A vulnerability was determined in conductor-oss conductor up to 3.32.5.Check if you run itEPSS 0.35%Oct 13, 2026
- High7.3NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read.Check if you run itEPSS 0.13%Oct 13, 2026
- High7.3NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write.Check if you run itEPSS 0.13%Oct 13, 2026
- High7.3NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read.Check if you run itEPSS 0.12%Oct 13, 2026
- High7.5A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.41%Oct 13, 2026
- High8.7The Ignition Perspective module does not properly validate session privileges when determining Designer-level access.Check if you run itEPSS 0.48%Oct 13, 2026
- Medium6.8A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62).Check if you run itEPSS 0.15%Oct 13, 2026
- High8.4A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G…Check if you run itEPSS 0.14%Oct 13, 2026
- Critical9.4Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.Check if you run itEPSS 0.41%Oct 13, 2026
- Unknownpyjwt vulnerabilitiesOpen the advisoryOct 13, 2026
- Critical10.0The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases.Check this weekEPSS 39.00%Oct 13, 2026
- Medium4.3The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai…Check if you run itEPSS 0.24%Oct 13, 2026
- High7.2The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versio…Check if you run itEPSS 0.25%Oct 13, 2026
- High7.2The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '…Check if you run itEPSS 0.24%Oct 13, 2026
- UnknownMalicious code in brass-common (npm)Open the advisoryOct 13, 2026
- High7.1The macOS version of the DigiD app is not signed with Hardened Runtime.Check if you run itEPSS 0.10%Oct 13, 2026
- Medium5.5A weakness has been identified in SourceCodester Performance Indicator System 1.0.Check if you run itEPSS 0.41%Oct 13, 2026
- Critical9.3Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint…Check if you run itEPSS 0.35%Oct 13, 2026
- Medium5.3A flaw has been found in PaddlePaddle PaddleX up to 3.7.2.Check if you run itEPSS 0.40%Oct 13, 2026