Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleCheck if you run itEPSS 0.20%Oct 16, 2026
- Medium6.0FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestCheck if you run itEPSS 0.24%Oct 16, 2026
- Medium6.9FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingCheck if you run itEPSS 0.25%Oct 16, 2026
- Medium5.4A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execu…Check if you run itEPSS 0.22%Oct 16, 2026
- High7.0A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local auth…Check if you run itEPSS 0.10%Oct 16, 2026
- Medium6.8A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.Check if you run itEPSS 0.09%Oct 16, 2026
- Medium6.9A vulnerability was determined in bitcoinj up to 0.17.Check if you run itEPSS 0.29%Oct 16, 2026
- High7.2The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) plugin for WordPress is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.24%Oct 16, 2026
- High7.2The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter i…Check if you run itEPSS 0.25%Oct 16, 2026
- High8.1Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.Check if you run itEPSS 0.26%Oct 16, 2026
- Medium6.4The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions…Check if you run itEPSS 0.21%Oct 16, 2026
- Critical9.2Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command ExecutionCheck if you run itEPSS 0.58%Oct 16, 2026
- High7.2The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to…Check if you run itEPSS 0.31%Oct 16, 2026
- Medium6.5The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1.Check if you run itEPSS 0.28%Oct 16, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Houzez.co Houzez houzez allows Reflected XSS.This issue affects H…Check if you run itEPSS 0.15%Oct 16, 2026
- Critical10.0Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.Patch nowKEVEPSS 0.98%Oct 16, 2026
- Critical9.8Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe componentCheck this weekEPSS 29.00%Oct 16, 2026
- Critical9.8Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious CodeOpen the advisoryOct 16, 2026
- Critical9.8Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.Patch nowKEVEPSS 0.00%Oct 16, 2026
- Critical9.8The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.Patch nowKEVEPSS 0.44%Oct 16, 2026
- Medium4.3Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update HookCheck if you run itEPSS 0.21%Oct 16, 2026
- Critical9.8LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' ParameterPatch nowKEVEPSS 0.44%Oct 16, 2026
- UnknownA heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a cra…Check if you run itEPSS 0.18%Oct 16, 2026
- High7.1A flaw was found in WildFly.Check if you run itEPSS 0.34%Oct 15, 2026
- UnknownCVE-2026-8311Open the advisoryOct 15, 2026