Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownservmask all-in-one_wp_migration Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.43%Oct 13, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.96%Oct 13, 2026
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.60%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.71%Oct 13, 2026
- Unknownninjaforms ninja_forms_file_uploads Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.60%Oct 13, 2026
- Unknownproperfraction profilepress Improper Privilege ManagementPatch nowKEVEPSS 0.39%Oct 13, 2026
- Unknownwpforms wpforms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.48%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution VulnerabilityCheck if you run itEPSS 0.78%Oct 13, 2026
- Unknownbeardev joomsport Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.66%Oct 13, 2026
- High8.8SQL command injection in webmailCheck if you run itEPSS 0.30%Oct 13, 2026
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- Unknowndynamiapps frontend_admin Improper Privilege ManagementPatch nowKEVEPSS 0.72%Oct 13, 2026
- Unknowngivewp givewp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 13, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.50%Oct 13, 2026
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.66%Oct 13, 2026
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 1.39%Oct 13, 2026
- Unknownhashthemes hash_form Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- Unknownbrainstormforce astra Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Oct 13, 2026
- Unknownkriesi enfold Improper Access ControlPatch nowKEVEPSS 0.33%Oct 13, 2026
- UnknownImportant: libreoffice security updateOpen the advisoryOct 13, 2026
- Medium6.5IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to…Check if you run itEPSS 0.31%Oct 12, 2026
- High7.5IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.36%Oct 12, 2026
- High8.2IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths.Check if you run itEPSS 0.35%Oct 12, 2026
- High8.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.Check if you run itEPSS 0.34%Oct 12, 2026
- Medium5.3Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get_mailboxes and get_quota APIs that allows…Open the advisoryOct 12, 2026