Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMalicious code in @mntv-analysis/ui-components (npm)Open the advisoryOct 13, 2026
- HighThe Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name User Field in all versions up to, and includi…Check if you run itEPSS 0.24%Oct 13, 2026
- HighThe WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter…Check if you run itEPSS 0.32%Oct 13, 2026
- HighThe Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insu…Check if you run itEPSS 0.24%Oct 13, 2026
- MediumThe Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versi…Check if you run itEPSS 0.24%Oct 13, 2026
- HighWhen Gitea's web installer is reachable against a database that already contains users, such as after has been reset to , submitting the install form with an administr…Check if you run itEPSS 0.44%Oct 13, 2026
- HighA repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references…Check if you run itEPSS 0.35%Oct 13, 2026
- Critical9.9IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data s…Check if you run itEPSS 0.52%Oct 13, 2026
- HighIBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.5Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundle…Check if you run itEPSS 0.49%Oct 13, 2026
- Unknownthimpress learnpress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.28%Oct 13, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.64%Oct 13, 2026
- Unknownservmask all-in-one_wp_migration Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.43%Oct 13, 2026
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.60%Oct 13, 2026
- UnknownWPDeveloper essential_addons_for_elementor Improper Privilege ManagementPatch nowKEVEPSS 0.38%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.71%Oct 13, 2026
- Unknownproperfraction profilepress Improper Privilege ManagementPatch nowKEVEPSS 0.39%Oct 13, 2026
- Unknowndynamiapps frontend_admin Improper Privilege ManagementPatch nowKEVEPSS 0.72%Oct 13, 2026
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.66%Oct 13, 2026
- High8.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.Check if you run itEPSS 0.34%Oct 12, 2026
- High8.5Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile field that is rendered without escaping into portal pages.Check if you run itEPSS 0.21%Oct 12, 2026
- Medium6.9Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce authorization checks.Check if you run itEPSS 0.32%Oct 12, 2026
- High8.6Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the edit users…Check if you run itEPSS 0.33%Oct 12, 2026
- Medium6.3Nginx UI: Auto backup name allows path traversal outside validated storage pathCheck if you run itEPSS 0.17%Oct 12, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextCheck if you run itEPSS 0.11%Oct 12, 2026