Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- HighMissing limits on resource use in the match expression evaluator of MongoDB Server can cause the server to consume excessive memory.Check if you run itEPSS 0.24%Oct 13, 2026
- MediumUse of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released.Check if you run itEPSS 0.22%Oct 13, 2026
- HighThe WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including, 9.3.03.…Check if you run itEPSS 0.25%Oct 13, 2026
- HighIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing.Check if you run itEPSS 0.17%Oct 13, 2026
- HighIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface.Check if you run itEPSS 0.17%Oct 13, 2026
- HighIBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmwar…Check if you run itEPSS 0.17%Oct 13, 2026
- HighIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing.Check if you run itEPSS 0.14%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service VulnerabilityOpen the advisoryOct 13, 2026
- Critical9.9IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data s…Check if you run itEPSS 0.52%Oct 13, 2026
- CriticalIBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation.Check if you run itEPSS 0.51%Oct 13, 2026
- Highmp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp.Check if you run itEPSS 0.52%Oct 13, 2026
- Unknownwpusermanager wp_user_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.73%Oct 13, 2026
- Critical9.1Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.83%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service VulnerabilityCheck if you run itEPSS 0.85%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.56%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.64%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.80%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service VulnerabilityCheck if you run itEPSS 1.06%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 1.27%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.64%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 1.10%Oct 13, 2026
- Medium5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.67%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 1.10%Oct 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.56%Oct 13, 2026
- Unknownservmask all-in-one_wp_migration Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.43%Oct 13, 2026